creator-plugin-development

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Outsider free text can reach the plugin sandbox via UI→plugin postMessage fields (e.g., import-svg’s content: string) and is then passed to creator.activeScene.import({ type: 'SVG', content: msg.content }), so the agent workflow ingests attacker-controlled text as part of message handling/import.