create-svg

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). At runtime the CLI render/verify pipeline ingests user-provided YAML scene text (via load_scene() -> yaml.safe_load -> Pydantic), which is then rendered into SVG and optionally checked in Chromium, so outsider-authored free text can reach the LLM-exposed pipeline.