exploded-teardown

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow ingests user-supplied product photos, raster drawings, and video frames to generate 3D/2D teardown model geometry.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The script programmatically installs the third-party package svgelements from PyPI via subprocess.run on demand, constituting an unverifiable runtime dependency without strict provenance control.