video-use-best-practices

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). One URL points to a third‑party static FFmpeg ZIP (evermeet.cx) — a direct binary download from a non-official distributor that is commonly used but fits the "direct executable from an untrusted source" high-risk pattern.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Skill runtime ingests outsider-authored free text via user-provided video audio that is transcribed by ElevenLabs Scribe (curl POST to https://api.elevenlabs.io/v1/speech-to-text), and the resulting transcript text is then processed by the burn/edit pipeline.