threejs-network-viz

SUSPICIOUS. The main topology-visualization scope is coherent and mostly low risk, but the optional real-stencil feature materially raises risk by requiring a non-official, source-built third-party MCP server and forwarding Sketchfab API credentials to it. That credential-forwarding path is disproportionate to the otherwise simple HTML-rendering purpose and creates a significant supply-chain trust issue, though there is not enough evidence of confirmed malicious intent.