media-use

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required runtime workflow for resolve calls the heygen CLI (heygen-search.mjs → execFileSync("heygen", ...)), which fetches outsider-authored catalog/search results from HeyGen and then ingests their returned JSON fields (e.g., best.description, best.url, best.id) into the agent-visible .media/index.md/manifest context.