multiplayer-sync

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's SKILL.md and references clearly show ingesting untrusted, user-generated network content — e.g., MessageBus handlers (bus.on('spawn', ...) and bus.on('chat', ...)) and WebSocket/fetch examples — and those payloads are parsed and used to create entities or drive behavior, so external third-party content can materially influence actions.