verysmallwoods-video

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). 该 skill 在运行时会处理用户提供的口播稿/音频及其 SRT 字幕文本（用于“Step 2/3：字幕校正、切段对齐并合流成片”），因此会直接摄入外部用户可控的自由文本内容。

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The caption-skin HTML files load and execute a remote GSAP script at runtime via "https://cdn.jsdelivr.net/npm/gsap@3.14.2/dist/gsap.min.js", which the skill relies on to run caption timelines (i.e., fetching and executing remote code during runtime).