3d-asset-production
Pass
Audited by Gen Agent Trust Hub on Jul 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill instructions and metadata are focused on technical 3D asset production workflows (retopology, PBR materials, LODs) and contain no malicious instructions or prompt injection patterns.
- [SAFE]: The bundled Python script
scripts/inspect_gltf.pyis a bounded preflight inspector for glTF/GLB assets. It implements robust security measures including path resolution checks to prevent directory traversal and strict URI validation to block external network schemes or malformed paths. - [COMMAND_EXECUTION]: The unit test file
tests/test_inspect_gltf.pyutilizessubprocess.runto verify the functionality of the inspection script. The implementation follows security best practices by passing arguments as a list and avoiding shell execution, ensuring process spawning is restricted to the local environment and the intended Python interpreter. - [EXTERNAL_DOWNLOADS]: The skill references technical documentation from well-known industry sources including the Khronos Group, Epic Games (Unreal Engine), and Unity. These links are provided for informational purposes to anchor production decisions in official specifications.
Audit Metadata