3d-model-generation

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's SKILL.md and references/SSE-EVENTS.md explicitly show ingestion of arbitrary public content—accepting user-provided image_urls (e.g., "image_urls": ["https://example.com/product-image.jpg"]) and emitting web_search_query / web_search_citations events with external URLs—so the agent reads and acts on untrusted third-party web content as part of its workflow.