3d-graphics

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill includes many runtime asset-loading examples (e.g., references/02-loaders.md, references/15-specialized-loaders.md, and references/03-textures.md) that call loader.load('model.gltf'), textureLoader.load('texture.jpg'), video.src='video.mp4', etc., which clearly fetch and ingest external/untrusted models, textures and media from third‑party URLs as part of the agent's workflow.