url-to-motion-design

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow reads outsider-authored text from the X post or video title and description that fetch-source.mjs pulls for a user-supplied URL, and the agent reads it via source.json; the user chooses the URL, so an attacker can publish poison but cannot force delivery.