image-2-multi-reference-image

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The runtime workflow scripts/imagegen.py ingests outsider-authored free text directly from CLI arguments --prompt (and optional --system) into the HTTP request body (chat_text/generate_image), i.e., first-party asset-generation text sent to the AI service.