ai-avatar-video

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow in SKILL.md is a user-invoked inference.sh CLI that takes outsider-provided free text fields like voice_script or text as direct inputs to the apps (e.g., pruna/p-video-avatar and inworld/text-to-speech-2), so the agent may ingest attacker-authored free text.