threejs-impl-lighting

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The runtime workflow ingests HDR/EXR environment map content loaded from a URL (e.g., rgbeLoader.load('environment.hdr', ...) / new EXRLoader().load('environment.exr', ...)), which is public/outsider-authored free text (URL-provided) that becomes LLM-readable via the agent’s fetched page/file contents.