morph-ppt-3d

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md "Model Discovery Flow" (Step 2: Search for models (agent-driven)) explicitly instructs the agent to web-search and download GLB models from public sites like Sketchfab, Poly Pizza, Free3D, and raw GitHub URLs, meaning the agent will fetch and interpret untrusted third-party content that can alter its subsequent tool actions.