threejs-r3f
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing well-known and standard development packages including
three,@react-three/fiber,@react-three/drei, and@react-three/rapierfrom official registries. It also references the Draco CDN, which is the standard mechanism for loading geometry decoders used by the framework. - [INDIRECT_PROMPT_INJECTION]: The skill guides the agent in writing code to load external 3D models (GLTF/GLB) and textures. This represents a standard data ingestion surface for 3D applications, and the skill follows established library patterns for asset loading.
Audit Metadata