threejs-builder
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard Three.js development patterns, including scene setup, lighting, and animation logic. No malicious behavior or security vulnerabilities were identified.
- [EXTERNAL_DOWNLOADS]: The skill references Three.js core and addons from
unpkg.com, a well-known CDN for JavaScript packages. It also fetches Draco decoders from Google'sgstatic.com. These are legitimate and standard practices for web-based 3D applications. - [COMMAND_EXECUTION]: Includes a Python script (
scripts/install-gltf-calibration-helpers.py) designed to copy a local JavaScript module into a user's project directory. The script uses standard libraries and performs simple file system operations (creating directories and copying a local file) as part of its intended functionality.
Audit Metadata