spline-3d-integration

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). This skill explicitly instructs the agent to load arbitrary Spline scene URLs hosted on prod.spline.design (see "STEP 2 — Get the Scene URL" and many examples like SCENE_URL and in REACT_INTEGRATION.md / VANILLA_INTEGRATION.md), and the code/docs show the agent reading scene content (onLoad, getVariable, e.target.name, events, findObjectByName) which is user-generated/untrusted and can directly influence programmatic actions — meeting all flagging criteria.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes runtime loading and execution of external JavaScript from the unpkg CDN (e.g., https://unpkg.com/@splinetool/viewer/build/spline-viewer.js and the dynamic import https://unpkg.com/@splinetool/runtime@latest/build/runtime.module.js), which are fetched and executed in-browser as required dependencies for the embed, so remote code execution at runtime is happening.