3d-animation

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). Yes — the package explicitly instructs embedding and loading external, user/third-party assets (e.g., spline-3d-integration's required workflow to embed scenes from https://prod.spline.design/.../scene.splinecode and the threejs-loaders/threejs-textures workflows that load arbitrary GLTF/texture URLs), so the agent will fetch and interpret untrusted third‑party content that can change subsequent behavior.