threejs-interaction
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: No malicious instructions or bypass attempts were detected in the skill content.
- [DATA_EXFILTRATION]: The skill does not access sensitive information or credentials. Network references are limited to official Three.js documentation and public repositories.
- [REMOTE_CODE_EXECUTION]: No remote code execution patterns or unverifiable dependency installations were found.
- [COMMAND_EXECUTION]: The skill does not utilize dangerous shell commands or attempt privilege escalation.
- [INDIRECT_PROMPT_INJECTION]: The skill interacts with user-provided application code to implement features.
- Ingestion points: The skill processes user project files through standard agent tools.
- Boundary markers: No specific delimiters or warnings for external code content are provided in the instructions.
- Capability inventory: The agent uses file system tools to read and edit project source code.
- Sanitization: No explicit validation or sanitization of user-provided logic is specified.
Audit Metadata