motion-video-director

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill instructs the agent to use Playwright (reference/asset-hunting.md) and Firecrawl (reference/mcp-setup.md, reference/fonts.md) to browse arbitrary web pages and search engines, ingesting outsider-authored content during asset and font discovery.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill instructs using ElevenLabs' REST API via curl or a Python helper script (gen_sfx_elevenlabs.py), which constitutes a remote operational dependency on ElevenLabs without an official publisher-signed package or distribution channel.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill is a motion video and sound design assistant with instructions for generating SFX via the ElevenLabs API and making optional paid requests with user approval (SKILL.md:36, SKILL.md:57). However, these API calls operate via customer-configured credentials and require explicit paid-request approval without providing direct financial execution or automated payment routing (SKILL.md:42). This constitutes an indirect financial or billing usage context rather than a direct financial operation.