remotion-best-practices

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's calculateMetadata guidance (rules/calculate-metadata.md) includes an explicit example that fetches arbitrary external URLs (fetch(props.dataUrl, {signal: abortSignal}) and uses the returned JSON to set composition props/duration/width/height), so untrusted third‑party content can be ingested at runtime and directly influence rendering behavior and decisions.