videoforge-pipeline

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly scrapes public Zillow listings (see "Zillow Scrape" in SKILL.md and apps/worker/src/services/apify.ts and the /api/jobs/from-zillow endpoint) and ingests those untrusted listing photos/text into the prompt-generation and clip-generation pipeline (prompt-generator, Gemini, Kling), so arbitrary third‑party content is read and can materially influence prompts and downstream tool actions.