spatial-swiftui-developer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill includes examples that asynchronously load 3rd‑party assets from arbitrary HTTPS URLs (see references/model3d.md: Model3D(url: URL(string: "https://example.com/robot.usdz")!)), meaning it ingests content from the open web into the runtime and could therefore expose the agent to untrusted third‑party data.