cesiumjs-entities

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md explicitly shows loading external data sources (GeoJsonDataSource.load(), KmlDataSource.load(), CzmlDataSource.load()/process(), GpxDataSource.load() — e.g., loading GeoJSON/KML/CZML/GPX via URLs) and displays entity description HTML in the InfoBox, so untrusted/public third‑party content would be ingested and can influence the agent's entities and behavior.