hyperframes-audio

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). At runtime, scripts/carve.mjs reads outsider-authored composition HTML from --comp (e.g., <audio>/<video> tags and src/id/data-* attributes) via readFileSync(compPath, "utf-8"), then decodes and analyzes the referenced media files with ffmpeg during detectTracks()/decode()/decode() calls to produce data-fx-carve, data-fx-chain, and data-automation.