threejs-network-viz

Pass

Audited by Gen Agent Trust Hub on Oct 2, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides network topology visualization using Three.js and Python, generating self-contained HTML files.
  • [SAFE]: Sensitive data protection is implemented in topology_model.py via FORBIDDEN_METADATA_KEYS and sanitize_metadata, which explicitly filters credentials, API keys, and secrets from processed metadata.
  • [SAFE]: External model fetching is limited to Sketchfab via a local MCP server, with mandatory CC0 license verification performed before any model is downloaded or embedded.
  • [SAFE]: The skill uses local, vendored versions of Three.js and associated controls, eliminating the risk of external library compromise via CDNs.
  • [SAFE]: Browser output is generated as a persistent, uniquely-named HTML file and opened locally, avoiding the need for a web server process and minimizing the network attack surface.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 2, 2026, 03:56 PM