talking-head-production

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). The generic media-style domains (e.g., https://speech.mp3, https://video.mp4, https://portrait.jpg, etc.) are unusual, nonstandard hostnames that look like placeholder/personal hosting and could be used to serve arbitrary or malicious payloads, while inference.sh and raw.githubusercontent.com are legitimate/known sources.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md describes a CLI workflow where outsider-supplied JSON fields like voice_script/prompt are passed to inference.sh apps (e.g., pruna/p-video-avatar, pruna/p-image) without any required prior selection/filtering step inside the workflow.