hyperframes-audio

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In scripts/carve.mjs the required CLI workflow reads outsider-provided free text by loading and parsing the user-supplied composition HTML (--comp), then ingests outsider-controlled attribute strings like src/data-start/data-fx-chain/data-automation/data-fx-carve via readFileSync(compPath, ...) and regex/JSON parsing during detectTracks and chain/lane parsing.