cesiumjs-custom-shader
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a legitimate technical guide and set of examples for the CesiumJS CustomShader API. It includes implementation details for vertex and fragment shaders, uniform handling, and metadata integration.
- [EXTERNAL_DOWNLOADS]: The example scripts fetch sample 3D Tilesets and glTF assets from the official CesiumGS GitHub repositories (
github.com/CesiumGS). These are public, well-known resources provided by the vendor for development and testing purposes. - [INDIRECT_PROMPT_INJECTION]: The skill documents the ingestion of external metadata and feature IDs from glTF files. This data is processed within the WebGL shader environment, which is highly constrained. The documentation explicitly details the sanitization rules applied to metadata property IDs to ensure GLSL compatibility, which acts as a safety measure against malformed or malicious identifiers.
- [COMMAND_EXECUTION]: No shell command execution patterns or dynamic context injections (such as the
!syntax) were detected in the skill instructions or scripts.
Audit Metadata