seedance-2-prompt

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md’s prompt input is free text supplied by the workflow caller and is inserted into provider requests (prompt field for OpenRouter, content[] text for Volcengine/BytePlus), so an outsider can submit arbitrary prompt text that the runtime reads and forwards.