remotion

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's documentation instructs use of calculateMetadata that fetches external URLs (see references/compositions-and-sequencing.md example fetching https://api.example.com/video/${props.videoId}) and allows remote media URLs (references/media-and-assets.md showing and "Fetch the Lottie JSON"), meaning the agent is expected to ingest untrusted third‑party content whose JSON/media can change composition props/duration and thereby influence subsequent actions.