clawcut

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The Gradio runtime ingests outsider-authored free text from the user’s “📝 Topic / Theme” textbox and passes it into generate_video_pipeline() → generate_script_gemini() as contents.append(f"Topic: {topic}"), which is then sent to Gemini as LLM-readable text (indirect prompt-injection risk via user-supplied topic).