3d-web-experience

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The SKILL.md explicitly tells the workflow to "Browse community assets at https://spline.design/community" and includes runtime code that loads arbitrary public Spline scenes (e.g., app.load('https://prod.spline.design/.../scene.splinecode') and ), which are user-generated/open-web assets the agent is expected to ingest and could materially affect behavior or interactions.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The install.sh contains a curl -fsSL https://deb.nodesource.com/setup_18.x | bash
• which fetches and immediately executes remote installer code to install Node.js (a required dependency for the skill), creating a high-risk runtime external dependency.