fun-asr

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In scripts/fun_asr_cli.py, the agent CLI takes the user-supplied audio file path, uploads it to S3, then downloads DashScope’s transcription_url JSON and formats it into plain text/JSON/SRT (i.e., it ingests outsider-authored content that comes from the audio), before saving the resulting transcript to a file.