xfyun-asr

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Yes—scripts/transcribe.py calls the external ASR service and then parses content.orderResult/lattice from the HTTP JSON response into transcript text (_extract_xfyun_order_result_text), which is then printed/returned and thus becomes LLM-readable free text at runtime.