spark-video-vfx-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow ingests multiple outsider-authored free-text files at runtime—specifically projects/<p>/<ep>/storyboard.json (shot prompt fields), projects/<p>/<ep>/script.md (dialog lines), and projects/<p>/<ep>/cast/<name>/cast.md (soul card text)—which are not guaranteed to be authored by the operating user and are then read into the agent’s LLM context for validation.