captions-compliance

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In scripts/to-captions-pipeline.py, the outsider-provided audio file path is fed through ffmpeg into faster_whisper and the resulting transcribed text (free-form caption text) is then written into the generated SRT, making it indirect outsider-authored content at runtime.