add-music-bed

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow runs search_resources kind:"sfx" against Freesound, a community-uploaded registry whose titles, descriptions, and tags are outsider-authored, and the agent reads those results before selecting a clip, so this is low exposure because the agent must actively search for it. The curated music and SFX packs are first-party-curated, and the composition, transcripts, and brand kit are the user's own data.