nano-banana-2

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In scripts/imagegen.py, the outsider-provided --prompt (and optional --system) is read from CLI arguments and directly sent as messages/prompt to POST .../openapi/v1/chat/text or POST .../openapi/v1/generation/image, so free text is ingested at runtime before any specific item selection.