seedance2

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In scripts/seedance.sh, the runtime reads outsider-authored free text directly from the user-supplied --prompt argument and embeds it into the content[0].text field sent to POST /contents/generations/tasks, so the workflow ingests arbitrary text before making the API call.