postfx-composer

Pass

Audited by Gen Agent Trust Hub on Sep 30, 2026

Risk Level: SAFENO_CODE
Full Analysis
  • [SAFE]: The skill provides boilerplate code and architectural patterns for Three.js and react-three-fiber post-processing. It consists entirely of documentation and implementation examples for graphics programming.
  • [EXTERNAL_DOWNLOADS]: The skill recommends installing standard, well-known libraries from the NPM registry: @react-three/postprocessing, postprocessing, and three. These are official packages for the Three.js ecosystem and do not pose a security risk.
  • [DYNAMIC_EXECUTION]: While the skill demonstrates custom shader creation using GLSL strings, these are standard Three.js practices for GPU-side execution (shaders) and do not involve unsafe runtime evaluation of CPU-side code or untrusted inputs.
  • [COMMAND_EXECUTION]: The npm install command provided is a standard installation instruction for the required dependencies.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 30, 2026, 06:09 AM