talking-head-production

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow runs belt app run commands on user-supplied image, audio, and video URLs and does not read any monitored feed or queue, so the only outsider-authored text it could ingest is the transcript of an arbitrary user-selected video in the Dub workflow, which requires the agent to fetch a specific item.