reveal-3d
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install packages from NPM, specifically vendor-owned packages like
@cognite/reveal-widgetand@cognite/sdk. These are trusted resources from the skill author ('cognitedata').- [COMMAND_EXECUTION]: Provides standard developer commands for package management (pnpm add) and a utility script to extract WASM binaries from installed dependencies. These operations are local to the development environment and part of the documented integration process.- [DYNAMIC_EXECUTION]: Includes a module to patch the globalBlobconstructor. This is a technical workaround to facilitate WASM loading for point clouds within a restricted Content Security Policy (CSP) environment and is described with clear functional justification.- [DATA_EXFILTRATION]: Mentions that the widget usesmixpanel-browserfor anonymous usage metrics. The skill explicitly provides instructions on how to disable this tracking, ensuring transparency and user control.
Audit Metadata