remotion-best-practices

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's SKILL.md explicitly allows and documents downloading arbitrary remote assets ("Remote URL (will be downloaded during render)" with ) and shows a dynamic metadata example that awaits fetched data (resolvedData: await fetchData()), so it ingests untrusted public content which can alter rendering props/decisions.