speckle-core-transport

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). This skill explicitly uses ServerTransport and operations.receive/copy_object_and_children to download and deserialize objects from Speckle servers (SKILL.md and references/examples.md), which are arbitrary third‑party/user-generated sources that the agent reads as part of its workflow and could therefore carry instructions that influence subsequent behavior.