remotion-best-practices

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). This skill's rule files explicitly instruct fetching and ingesting arbitrary remote URLs (e.g., rules/calculate-metadata.md shows using fetch(props.dataUrl) to load JSON and set composition props, and multiple files—rules/assets.md, rules/lottie.md, rules/import-srt-captions.md, and mediabunny-based rules—allow UrlSource/remote URLs), so untrusted third-party content is read and used to determine metadata/props and rendering behavior.