remotion-to-hyperframes

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill’s runtime LLM context is populated from the user-provided Remotion source directory (e.g., parsing .tsx files like useState/calculateMetadata patterns in scripts/lint_source.py), which is outsider-authored free text when the operating user is migrating someone else’s code.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The HF output index.html files load and execute remote JS at render time (required for rendering) — e.g. the GSAP CDN script https://cdnjs.cloudflare.com/ajax/libs/gsap/3.12.5/gsap.min.js is fetched during rendering and executes remote code the composition relies on.