replicate-local-workflow

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow reads prediction JSON produced by Replicate (including arbitrary prediction.output URLs), then scripts/save-prediction.mjs fetches those URLs and persists any textual/structured outputs (via findUrls + fetch(url)), so outsider-authored free text can be ingested indirectly when it is returned as part of outsider-influenced outputs.