avatar-video

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow ingests user-provided script text and sends it as voice.input_text to HeyGen’s POST https://api.heygen.com/v2/video/generate (and similarly polls GET https://api.heygen.com/v2/videos/{video_id}), so outsider-authored free text can be supplied directly into the LLM-visible request payload.