cesiumjs-3d-tiles
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill contains technical documentation and code snippets for the CesiumJS library. No security threats were detected across the analyzed categories.
- [INDIRECT_PROMPT_INJECTION]: The skill describes methods for loading external data (3D Tiles, Mapbox Vector Tiles, I3S layers, and Voxel providers) from remote URLs. While this represents a data ingestion surface, it is the primary intended purpose of the skill and follows standard API usage for geospatial visualization.
- Ingestion points: Remote tile and metadata loading via
Cesium3DTileset.fromUrl,MVTDataProvider.fromUrl,Cesium3DTilesVoxelProvider.fromUrl, andI3SDataProvider.fromUrl(SKILL.md). - Boundary markers: None explicitly defined in the provided code snippets.
- Capability inventory: Rendering geometry, metadata extraction/picking (
picked.getProperty), and declarative styling using a domain-specific expression language. - Sanitization: Not explicitly covered in the snippets; relies on CesiumJS's internal parsing and the developer's implementation.
Audit Metadata