nano-banana-pro-openrouter

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md’s “Plain Prompt Mode” / scripts/openrouter_image.py reads untrusted runtime stdin (plain text or JSON fields like page_outline/requirement_framing) into raw_text/outline and incorporates it into the OpenRouter chat messages content and slot prompts.