media-use

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In audio/scripts/audio.mjs, the runtime reads audio_request.json (including free-text lines[].text and optional bgm.query/prompt) and sends that outsider-authored text to TTS/music provider calls for synthesis/retrieval; thus prompt-injection text is ingested without first selecting a specific trusted item.