remotion-best-practices

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's rule files (e.g., rules/calculate-metadata.md shows calculateMetadata fetching props.dataUrl, rules/lottie.md fetches external Lottie JSON, and rules/import-srt-captions.md / rules/assets.md explicitly allow fetching remote .srt, image, video and other URLs) instruct the agent to fetch and parse open/public third‑party content and then use that data to set composition props, durations, and rendering behavior, which could let untrusted content materially influence tool decisions.