three-environment-hdri-reflections
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a legitimate technical guide for Three.js developers. It contains code for rendering high-dynamic-range (HDR) environments and managing PBR (Physically Based Rendering) materials.
- [REMOTE_CODE_EXECUTION]: No remote code execution patterns detected. The skill uses standard Three.js loaders (RGBELoader, EXRLoader) for image assets and dynamic imports for official Three.js addons, which are well-known and safe.
- [DATA_EXFILTRATION]: No data exfiltration patterns detected. Network operations are limited to loading 3D assets from local paths or well-known, community-trusted sources like Poly Haven.
- [DYNAMIC_EXECUTION]: The use of
await import()for Three.js addons in the reference implementation follows standard modular JavaScript practices and uses hardcoded paths, posing no security risk. - [PROMPT_INJECTION]: No evidence of prompt injection or instructions intended to override agent safety protocols. The instructions are strictly limited to the domain of 3D graphics programming.
Audit Metadata