stitch-remotion

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly retrieves and downloads Stitch project assets and HTML (SKILL.md workflow step 2 and README "Downloads screenshots and HTML code") and includes a download script that fetches arbitrary URLs (scripts/download-stitch-asset.sh), and the agent parses that untrusted, user-provided content to generate overlays and compositions—so third-party content is ingested and can influence composition/behavior.