threejs-model-loading
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security threats or malicious patterns were identified. The skill's implementation follows industry-standard practices for 3D asset management in web development.
- [EXTERNAL_DOWNLOADS]: The skill documents how to load 3D assets (GLTF, FBX, OBJ) from URLs. This is the primary intended function and does not involve downloading executable scripts or untrusted dependencies.
- [DATA_EXFILTRATION]: No patterns of sensitive data access or exfiltration were found. The skill operates exclusively on 3D model data provided via standard asset URLs.
- [REMOTE_CODE_EXECUTION]: The skill does not use any dynamic execution functions like
eval(),exec(), or subprocess spawning. It relies on standard Three.js loader classes.
Audit Metadata