seedream-image

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The SKILL.md explicitly accepts arbitrary public image URLs for image-to-image editing (see "Image Editing (Image-to-Image)" and the Parameters table entry image with example https://example.com/photo.jpg), so the agent/service will fetch and interpret untrusted third-party content that can materially influence generation behavior.