yue2-music

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow ingests external audio and reference recordings via SheetSage2 transcription (e.g. scripts/transcribe.py), which processes outsider-authored audio content.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The script fetches a pinned dependency build from unpkg.com at runtime (https://unpkg.com/abcjs@6.7.0/dist/abcjs-basic-min.js), constituting an inbound external operational dependency with common unofficial/CDN provenance.