srt

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md’s runtime translation workflow reads the full contents of the worker-downloaded original SRT file at path (emitted via scripts/srt.mjs [srt-original]), where that SRT ultimately originates from outsider-controlled user-provided media/links, making it indirect prompt-injection text ingestion.