hero-spline-3d-embed
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were detected. The skill follows best practices for its intended purpose of 3D asset integration.- [EXTERNAL_DOWNLOADS]: The skill correctly identifies and utilizes official, well-known libraries such as
@splinetool/react-spline,@splinetool/runtime, andgsapfor its core functionality.- [COMMAND_EXECUTION]: The instructions contain standard package management commands for installing the required dependencies from official registries.- [DATA_EXFILTRATION]: The skill recommends loading 3D scene data from the official Spline production domain (https://prod.spline.design), which is the standard and expected behavior for this service.- [INDIRECT_PROMPT_INJECTION]: The skill processes a user-providedsceneUrlto load 3D assets. While this is an ingestion point for external data, the skill's capabilities are limited to rendering decorative 3D content and do not include access to sensitive system resources or credentials.
Audit Metadata