elevenlabs

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the required runtime workflow, tools like speechToText accept attacker-supplied source_url text as an HTTPS URL and then ingest the resulting transcription text from the API response at runtime; this is outsider-authored free text delivered via a user-provided URL.