fal-restore

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Outsider free text is ingested via the runtime --image-url parameter: scripts/restore.sh sends the user-supplied URL to https://fal.run/$MODEL, and the model provider will fetch and process the remote image content (outsider-authored content from arbitrary public URLs) as part of the inference context.