photo-metadata

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). embed.py’s runtime ingests a JSON manifest (provided at run time) containing outsider-authored free text fields like per-image alt/caption/keywords and writes them into local image metadata, so the workflow can be poisoned via externally supplied strings that are read and embedded by the tool.