Mml

Build 3D scenes and interactive experiences using MML (Metaverse Markup Language) for the Otherside metaverse and other MML-compatible environments. Use when...

This skill is basically documentation for MML and appears internally consistent with that purpose. Before using or deploying MML content produced with it, consider: (1) inline <script> and event handlers allow arbitrary JavaScript in the renderer — review and sanitize any scripts to avoid data exfiltration, unauthorized network calls, or malicious logic; (2) m-frame and remote src attributes can fetch arbitrary remote resources (models, audio, video, MML docs) — avoid loading untrusted hosts and check CORS/sandboxing; (3) m-position-probe and m-chat-probe expose user presence/chat data — only use with explicit user consent and in trusted environments; (4) the SKILL.md references a local compiled reference path and the skill has no provenance/homepage — if provenance matters, ask the publisher for source or prefer an official reference. If you plan to render scenes in a shared or production environment, test in an isolated environment first and ensure the client renderer applies appropriate sandboxing and network restrictions.

Type: OpenClaw Skill Name: mml Version: 1.0.0 The skill is classified as suspicious due to a prompt injection vector in `SKILL.md` that instructs the AI agent to read a local file (`/home/ubuntu/.openclaw/workspace/research/mml-reference.md`). While this specific instruction is for a benign documentation file, it demonstrates the agent's susceptibility to file access commands via prompt injection. Additionally, the MML language itself, as described in `SKILL.md` and `references/elements.md`, supports client-side JavaScript execution via `<script>` tags and `on*` attributes, and allows loading external resources (models, images, videos, other MML documents) from arbitrary URIs. These capabilities, while core to MML's design, represent a significant attack surface for potential XSS, SSRF, or content injection if the agent were to process or generate MML from untrusted input, or if the rendering environment is not properly secured.