threejs-interaction

Fail

Audited by Gen Agent Trust Hub on Oct 17, 2026

Risk Level: CRITICAL
Full Analysis
  • [SAFE]: The skill consists of educational documentation and standard JavaScript code snippets for 3D web development. The content is consistent with its stated purpose of teaching Three.js interactions.
  • [PROMPT_INJECTION]: No attempts to override agent behavior, bypass safety filters, or extract system prompts were detected in the instructions.
  • [DATA_EXFILTRATION]: The code snippets operate entirely within a client-side browser context for rendering purposes. No sensitive file paths, hardcoded credentials, or unauthorized network operations were found.
  • [OBFUSCATION]: Analysis confirmed the absence of Base64 encoding, zero-width characters, homoglyphs, or other techniques used to hide malicious intent.
  • [REMOTE_CODE_EXECUTION]: The skill does not download or execute external scripts. It references standard Three.js modules and addons typically used in web development.
  • [DYNAMIC_CONTEXT_INJECTION]: The skill does not use any dynamic command execution syntax in its metadata or body.
Recommendations
  • CRITICAL: 1 file(s) identified as malware by FileRep - DO NOT USE
Audit Metadata
Risk Level
CRITICAL
Analyzed
Oct 17, 2026, 04:40 PM