novoads-image-to-motion

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In novoads-image-to-motion, the runtime builds a prompt by ingesting an outsider-authored “Every legible string, transcribed verbatim” from the user-supplied start image (Step 1: transcribe strings) and then sends that prompt to POST /v1/estimates and POST /v1/videos, so the workflow is exposed to free text originating from user-provided content.