three-audio-visualizer-3d
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides implementation logic for real-time 3D visualization. All libraries mentioned (Three.js, GSAP, postprocessing) are well-known and standard in the WebGL ecosystem. No unauthorized network calls or sensitive file access patterns were found.\n- [INDIRECT_PROMPT_INJECTION]: The skill includes an attack surface for indirect injection via processed audio data.\n
- Ingestion points: The
AudioEngineclass inaudio-engine.tsingests data from anHTMLAudioElementfor FFT analysis.\n - Boundary markers: Not applicable as the data is treated as a continuous stream of numeric frequency values.\n
- Capability inventory: The skill uses Three.js for rendering and standard DOM APIs for UI. It does not have access to the file system, network (beyond the initial audio source), or shell command execution.\n
- Sanitization: Frequency data is normalized to 0-1 ranges and used solely for visual mapping (e.g., bar height, material glow). There is no pathway for this data to influence agent logic or system commands.
Audit Metadata