threejs-loaders-v2

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). Yes — SKILL.md contains explicit runtime steps that load and process external assets from arbitrary/public URLs and CDNs (e.g., loader.load("model.glb"), fetch("model.glb"), manager.setURLModifier(...), DRACOLoader/KTX2 decoder paths pointing to gstatic/jsdelivr), so the agent would ingest untrusted third‑party content that can influence runtime behavior.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill includes runtime loader configuration that fetches and executes remote decoder/transcoder code — e.g., GLTF+Draco uses setDecoderPath("https://www.gstatic.com/draco/versioned/decoders/1.5.6/") and KTX2 uses setTranscoderPath("https://cdn.jsdelivr.net/npm/three@0.183.0/examples/jsm/libs/basis/"), which will download and run external binaries/scripts at runtime and are required for decoding those compressed assets.