3d-web-experience

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The required workflow includes loading 3D content from an external URL (e.g., Spline scene="https://prod.spline.design/.../scene.splinecode"), which is public web content fetched at runtime and ingested as readable text/scene data into the agent’s LLM context via the runtime page/asset content.