afk-spline-3d-integration

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill explicitly loads user-created Spline scenes from public prod.spline.design URLs (see SKILL.md and files like VANILLA_INTEGRATION.md / REACT_INTEGRATION.md) and uses the runtime/viewer APIs to read variables, events, and object data which the agent is expected to interpret and act on, so untrusted third‑party content can materially influence behavior.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill loads and executes remote JavaScript at runtime from CDN URLs (e.g. https://unpkg.com/@splinetool/viewer/build/spline-viewer.js and https://unpkg.com/@splinetool/runtime@latest/build/runtime.module.js), which are required for the embed and therefore execute remote code in the user's page.