threejs-game-ui-designer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required workflow is to “Read the active GDD and approved target” and “Record proof and remaining gaps directly in the GDD,” which implies the agent ingests outsider-authored free-form GDD text at runtime (e.g., a GDD authored by someone other than the operating user) into the LLM context.