It might be the safety moderation system. It's rather aggressive and when it does kick in (at least in the API), it often returns an empty response giving basically zero indication as to the root cause.

The empty response issue is annoying since there is already a PROHIBITED_CONTENT flag, but it is not used in this case.