media-use

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). Multiple URLs point at local/private addresses (loopback, RFC1918, link‑local 169.254.* and 0.0.0.0) which can be abused for SSRF/local‑resource access, and the GitHub clone URL pulls unvetted third‑party code — together these are suspicious as download sources.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). audio/scripts/audio.mjs at runtime parses audio_request.json from disk and ingests request.lines[].text as untrusted free text for TTS/transcription (and thus for the captions pipeline) without requiring it to first select a specific item/provider result.