three-globe-visualization

Pass

Audited by Gen Agent Trust Hub on Aug 30, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides a standard implementation for 3D geospatial visualization. Analysis of all code components (coordinate conversion, instanced rendering, and scene orchestration) shows adhering to functional safety requirements.
  • [COMMAND_EXECUTION]: No shell commands or system-level execution patterns were identified in the SKILL.md or supporting reference files.
  • [DATA_EXFILTRATION]: The skill does not access sensitive local file paths (e.g., .ssh, .aws, .env) or perform network operations to untrusted domains. External assets (textures) are referenced as standard placeholders.
  • [OBFUSCATION]: No obfuscated code, encoded strings, or hidden URLs were detected. The TypeScript code is clear and well-documented.
  • [REMOTE_CODE_EXECUTION]: There are no patterns involving the download and execution of remote scripts or unverified dependencies.
  • [INDIRECT_PROMPT_INJECTION]: The skill handles geospatial data (lat, lng, labels). While labels are rendered in the DOM, the provided implementation uses textContent, which is a safe practice that prevents XSS by treating the input as plain text rather than HTML.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 30, 2026, 05:48 PM
Security Audit — agent-trust-hub — three-globe-visualization