remotion-render

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required workflow takes a user-supplied code string (free-form TSX) as the input to belt app run infsh/remotion-render, and that string is ingested by the runtime (and thus into the agent/LLM context) as executable/render instructions, so it can contain outsider-authored text (e.g., pasted from others) and act as indirect prompt injection.