audio-cog

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). scripts/openrouter_audio.py reads caller-supplied narration text from sys.stdin (via _audio_messages(sys.stdin.read())) and forwards it into the OpenRouter chat/completions request as user content, so outsider-authored text delivered to that stdin path can influence the runtime prompt.