subtitle-burner

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime path scripts/burn.py takes user-supplied --subtitles SRT file path, verifies it exists, and passes the resolved path into ffmpeg/libass via the subtitles='...':force_style='...' video filter, meaning outsider-authored SRT cue text is ingested at runtime without selecting a specific item first.