video-editor

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Outsider-authored free text from the user-provided SRT file is read at runtime by scripts/parse_srt.py (it loads the entire SRT content and extracts the subtitle text field), and that extracted text is then included in the LLM-visible JSON summary shown in SKILL.md Step 2.