three-js-fundamentals
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the Draco decoder from Google's GStatic CDN (
https://www.gstatic.com/draco/versioned/decoders/1.5.6/). This is a standard and expected practice for loading compressed 3D models in Three.js apps. - [EXTERNAL_DOWNLOADS]: References the Three.js library from the Unpkg CDN (
https://unpkg.com/three@0.169.0/build/three.module.js) for rapid prototyping. This is a well-known and trusted service for front-end development. - [COMMAND_EXECUTION]: Provides instructions to install the
threepackage via npm (npm install three@0.169.0). This is standard package management behavior. - [DATA_EXFILTRATION]: While the skill includes code for loading external assets (GLB models and textures), these are standard 3D asset loaders used for visual rendering and do not access sensitive local files or credentials.
Audit Metadata