video-spec-builder

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL explicitly requires the agent to "go search" and fetch real-time materials from public sources (see SKILL.md "联网优先" / "用户提到参考视频...你直接说'我去上网查一下'") and the spec/README lists open platforms to pull footage and SFX (e.g., SpaceX 官方 YouTube, NASA, Pexels, Pixabay, Freesound) which the agent is expected to read and interpret to build the video-spec.md and drive rendering actions — therefore untrusted third‑party content can materially influence tool decisions.