remotion-best-practices

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). This skill instructs the agent to fetch and ingest remote, potentially arbitrary third‑party content (e.g., rules/calculate-metadata.md uses fetch(props.dataUrl) to set composition props/duration, rules/lottie.md fetches Lottie JSON, and many files (videos.md, images.md, audio.md, get-video-duration.md, extract-frames.md) use remote URLs/UrlSource), so untrusted external content is read and can materially affect decisions and rendering behavior.