three-lighting-pbr-realism

Pass

Audited by Gen Agent Trust Hub on Aug 30, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a technical guide and boilerplate repository for 3D lighting configurations. It relies on standard, well-known libraries such as Three.js and @react-three/drei.
  • [EXTERNAL_DOWNLOADS]: The skill references external assets (HDRI files) from well-known and reputable 3D resource providers like Poly Haven and ambientCG. These references are documented neutrally for asset acquisition purposes.
  • [COMMAND_EXECUTION]: Code snippets provided in the documentation use standard Three.js API calls for lighting and material management. There are no instances of arbitrary command execution or shell interaction.
  • [DYNAMIC_EXECUTION]: The evaluation scripts in EVAL.md use basic property checks (e.g., console.assert) to verify the state of the 3D scene. They do not involve eval(), exec(), or any other unsafe dynamic execution patterns.
  • [DATA_EXFILTRATION]: No patterns of sensitive data access or exfiltration were found. The network operations described are limited to loading 3D assets from local paths or trusted domains.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 30, 2026, 05:49 PM
Security Audit — agent-trust-hub — three-lighting-pbr-realism