threejs-interaction
Fail
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: CRITICAL
Full Analysis
- [SAFE]: The skill consists of educational documentation and standard JavaScript code snippets for 3D web development. The content is consistent with its stated purpose of teaching Three.js interactions.
- [PROMPT_INJECTION]: No attempts to override agent behavior, bypass safety filters, or extract system prompts were detected in the instructions.
- [DATA_EXFILTRATION]: The code snippets operate entirely within a client-side browser context for rendering purposes. No sensitive file paths, hardcoded credentials, or unauthorized network operations were found.
- [OBFUSCATION]: Analysis confirmed the absence of Base64 encoding, zero-width characters, homoglyphs, or other techniques used to hide malicious intent.
- [REMOTE_CODE_EXECUTION]: The skill does not download or execute external scripts. It references standard Three.js modules and addons typically used in web development.
- [DYNAMIC_CONTEXT_INJECTION]: The skill does not use any dynamic command execution syntax in its metadata or body.
Recommendations
- CRITICAL: 1 file(s) identified as malware by FileRep - DO NOT USE
Audit Metadata