render-ig-live-gallery

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In scripts/build.py, outsider-authored free text from the runtime-provided config (CFG["slides"][...]["phrase"] and CFG["slides"][...]["comments"]) is directly rendered into images via draw_top_line(bg, sl["phrase"]) and inside build_card()’s comment loop (for handle,text in comments: ... d.text(..., text, ...)).