threejs-capacitor-ios
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install official Capacitor packages including @capacitor/core, @capacitor/cli, and @capacitor/ios from the npm registry. These are well-known packages from a established service and the references are documented neutrally.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external configuration data which creates an indirect prompt injection surface.
- Ingestion points: The skill fetches animation metadata from
assets_index.json(referenced inSKILL.mdandreferences/threejs-animation-index-pattern.md). - Boundary markers: The documentation recommends implementing 'Required Assertions' to validate the JSON structure and clip resolution at startup.
- Capability inventory: The workflow involves shell command execution (npm, npx cap) and Three.js runtime control.
- Sanitization: The instructions advise failing loudly with error messages for invalid contracts, providing a basic form of data validation.
Audit Metadata