discover-movies

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). This skill fetches public TMDB data (see src/tmdb_client.py using TMDB_BASE_URL and _api_request) and then directly reads movie overviews/metadata (used in src/taxonomy.py.extract_bridge_tags and src/cli.py scoring/reranking/storage flows), so untrusted third‑party content from TMDB can influence taxonomy tags, ranking, and downstream actions.