shader-postprocessing
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard documentation and code examples for Three.js post-processing. All external dependencies (three, postprocessing, @react-three/postprocessing) are well-known, industry-standard libraries from trusted registries (npm).
- [EXTERNAL_DOWNLOADS]: The skill recommends installing official packages from npm. These are standard development dependencies and do not represent a security risk.
- [COMMAND_EXECUTION]: Includes standard 'npm install' commands for library setup, which is expected behavior for a technical guide.
- [DYNAMIC_EXECUTION]: Demonstrates how to write custom shader effects by subclassing the 'Effect' class. The GLSL code provided is a simple duotone filter and does not involve unsafe execution of untrusted logic or network data.
- [INDIRECT_PROMPT_INJECTION]: While the skill discusses processing render targets, it does not involve ingesting or processing untrusted text or external data that could lead to prompt injection attacks.
Audit Metadata