pixverse-ai-image-and-video-generator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly accepts and fetches arbitrary HTTPS URLs and remote assets as inputs (see capabilities/create-and-edit-image --image , capabilities/create-video --image , and capabilities/asset-management asset upload which streams remote HTTPS URLs to a temp file and verifies image_url reachability), so untrusted third‑party content from public websites is ingested and used as generation inputs that can materially influence subsequent tool actions.