remotion-best-practices

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's rules explicitly fetch and ingest external, potentially arbitrary URLs (e.g., rules/calculate-metadata.md uses fetch(props.dataUrl) to transform props, rules/get-video-duration.md and extract-frames.md use mediabunny UrlSource for remote media, and rules/lottie.md and import-srt-captions.md fetch remote JSON/SRT), so untrusted third‑party content is read and can directly change metadata, props, or rendering behavior.