ffmpeg-ocr-logo

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Outsider free text can enter the LLM context via ocr/quirc runtime-emitted metadata: the filters decode text/payload from the input video frames (not authored by the operating user), and metadata=mode=print outputs lavfi.ocr.text=... / lavfi.quirc.*.payload=... which the agent would typically ingest for downstream reasoning.