remotion-best-practices

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Douyin GitHub project packaging requires runtime research of an outsider-authored GitHub repository (README/docs/releases/issues) and then uses that fetched prose to generate narration/scene plans that are fed into the agent’s LLM context (indirect prompt injection risk via public web content).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The transcribe-captions.md workflow calls installWhisperCpp/downloadWhisperModel (from @remotion/install-whisper-cpp) which at runtime downloads and installs Whisper.cpp and model files (i.e., fetching and executing remote native code), referenced in the docs https://www.remotion.dev/docs/install-whisper-cpp, so this is a required runtime external dependency that executes remote code.