video-content

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). SKILL.md Phase 1/4 reads handoff YAML and content spec YAML (e.g., marketing/handoffs/{name}-handoff.yaml and marketing/content-specs/{project}-{framework}.yaml) and then uses their fields (including brand_snapshot, content_spec, and slide text/archetypes) to generate Remotion/ffmpeg parameters—so if those YAMLs were authored by outsiders (e.g., /paper-marketing or /slideshow-script), their free-text fields flow into the LLM context at runtime.