remotion

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's rule files explicitly fetch and ingest arbitrary remote URLs (untrusted third‑party content) as part of its runtime workflows — for example, rules/calculate-metadata shows fetch(props.dataUrl), rules/lottie fetches Lottie JSON from https://assets4.lottiefiles.com, and multiple mediabunny-based rules (can-decode, extract-frames, get-video-duration) use UrlSource for arbitrary remote media — and that fetched content is parsed and used to set composition metadata, assets, captions, or rendering behavior, so it can materially influence subsequent actions.