byted-vod-process-tools

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly accepts and ingests arbitrary http/https URLs (see SKILL.md and references examples) and the code (scripts/api_manage.py: video_batch_upload / upload_media_auto calling UploadMediaByUrl to fetch SourceUrl, and get_video_audio_info using urllib.request.urlopen(info_url) to parse remote JSON) which means untrusted public content is fetched and its metadata can directly influence processing and decision logic.