video-assemble

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). The GitHub repo looks like a normal upstream reference, but the xiaomimimo hosts (api.xiaomimimo.com and token-plan-*.xiaomimimo.com) are external token/API endpoints on a domain that appears to mimic a known vendor name (typosquatting-like) and are therefore suspicious as untrusted token/ executable distribution or credential endpoints.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the required runtime workflow, scripts/assemble.py loads untrusted free text only from work_dir/tts_meta.json via json.loads(... )["segments"] and then generates captions from those TTS/narration fields; this is attacker-postable if they can write tts_meta.json into the work directory.