creator-character

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow uses browser automation playbooks (such as Google Gemini web app and Google Flow) to browse web pages and generate content under user direction, which entails ingesting arbitrary web pages and search results.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). An operational dependency on an external script (https://raw.githubusercontent.com/higgsfield-ai/cli/main/install.sh) is fetched and executed via curl during the setup/installation path for Higgsfield.