c-heygen

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill explicitly instructs the agent to navigate and interact with the public HeyGen web UI (https://app.heygen.com/studio — references/browser-render.md) and to poll a third‑party Floe API (floe-production.up.railway.app via the provided curl) and to read their responses (video ID from the HeyGen URL and status from the Floe JSON) as part of normal workflow, which exposes the agent to untrusted third‑party content that can influence subsequent actions.