threejs-spatial-data
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process complex external datasets (BIM/IFC models). It explicitly mentions treating embedded names and properties as data when displaying HTML, which identifies a vulnerability surface where malicious instructions embedded in model metadata could influence the agent's behavior during data rendering or analysis.
Audit Metadata