remotion-best-practices

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's rule files explicitly instruct fetching and ingesting remote, user-supplied resources — e.g., rules/calculate-metadata.md shows fetch(props.dataUrl) to transform composition props/duration, rules/lottie.md fetches Lottie JSON from an external URL, and rules/assets.md / rules/videos.md allow arbitrary remote URLs for Img/Video/Audio — meaning untrusted third‑party content is read and can directly change rendering behavior and props.