threejs-best-practices
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of educational documentation and code snippets for Three.js development. No malicious patterns, obfuscation, or unauthorized access attempts were identified.\n- [PROMPT_INJECTION]: The skill includes code templates for loading external resources such as 3D models and textures. This represents a potential surface for indirect prompt injection if untrusted URLs are processed without validation, though the provided examples are standard for 3D web development.\n
- Ingestion points: loadModel(url) and loadOptimizedTexture(url) examples in SKILL.md.\n
- Boundary markers: None identified in the provided code snippets.\n
- Capability inventory: The skill configuration permits the use of Read, Glob, and Grep tools.\n
- Sanitization: The educational examples do not include explicit input sanitization or integrity checks for external assets.
Audit Metadata