reveal-3d

Pass

Audited by Gen Agent Trust Hub on Oct 7, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to install packages from NPM, specifically vendor-owned packages like @cognite/reveal-widget and @cognite/sdk. These are trusted resources from the skill author ('cognitedata').- [COMMAND_EXECUTION]: Provides standard developer commands for package management (pnpm add) and a utility script to extract WASM binaries from installed dependencies. These operations are local to the development environment and part of the documented integration process.- [DYNAMIC_EXECUTION]: Includes a module to patch the global Blob constructor. This is a technical workaround to facilitate WASM loading for point clouds within a restricted Content Security Policy (CSP) environment and is described with clear functional justification.- [DATA_EXFILTRATION]: Mentions that the widget uses mixpanel-browser for anonymous usage metrics. The skill explicitly provides instructions on how to disable this tracking, ensuring transparency and user control.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 7, 2026, 10:33 AM