p-image

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow is executing belt app run pruna/... with user-supplied JSON (e.g., the prompt and images fields) passed into inference.sh’s image generation CLI, so the LLM ingests outsider-authored free text directly from the invocation payload.