remotion-captions

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow for displaying/importing captions fetches and parses caption text from a user-provided .json/.srt file (e.g., via fetch(staticFile(...)), response.json(), response.text(), and parseSrt), so an outsider can supply poison captions through the files the workflow reads.