remotion-video-creation

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly fetches and ingests remote, potentially user-provided content (e.g., fetch(props.dataUrl) in rules/calculate-metadata.md, fetch of Lottie JSON in rules/lottie.md, and numerous UrlSource/remote-URL examples for Img/Video/Audio across rules/assets.md and media-related rules), and that fetched untrusted content is parsed and used to set composition metadata or drive rendering behavior, so it could materially influence tool behavior.