threejs-textures

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides examples of loading textures from local paths or URLs using THREE.TextureLoader, RGBELoader, EXRLoader, and KTX2Loader. These are standard Three.js functionalities for fetching 3D assets.
  • [DYNAMIC_EXECUTION]: Includes examples of creating ShaderMaterial which uses GLSL code strings. This is the standard method for defining custom shaders in WebGL/Three.js and does not represent a system-level execution risk.
  • [INDIRECT_PROMPT_INJECTION]: The provided code snippets for loading textures (loader.load(url)) demonstrate how to fetch content from URLs. While this creates a surface for ingesting external data, it is the intended primary purpose of the library being documented and does not facilitate unauthorized instruction execution in this context.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 09:07 PM
Security Audit — agent-trust-hub — threejs-textures