threejs-loaders
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill functions as a documentation guide for Three.js asset loaders, providing standard implementation patterns for 3D models, textures, and environment maps.
- [EXTERNAL_DOWNLOADS]: Includes examples that fetch specialized decoders and transcoders from well-known service providers including Google (gstatic.com) and jsDelivr. These are standard resources for Draco and KTX2 compression in Three.js environments.
- [INDIRECT_PROMPT_INJECTION]: The skill documents methods for ingesting external data (GLTF, STL, OBJ models) from remote URLs.
- Ingestion points: External files loaded via
GLTFLoader.load(),TextureLoader.load(), and similar methods in SKILL.md. - Boundary markers: Not applicable as these are documentation examples.
- Capability inventory: Snippets demonstrate network fetching and file parsing capabilities using the Three.js library's native functions.
- Sanitization: Relies on standard browser-level security and the Three.js library's internal parsing logic for binary and text asset formats.
Audit Metadata