threejs-qa-release
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The script
scripts/inspect-threejs-canvas.mjsdynamically resolves and imports the@playwright/testandpngjsmodules from the local project's file system usingrequire.resolveandimport(). Additionally, it usespage.evaluateto execute code within the browser context to interact with game test hooks. - [COMMAND_EXECUTION]: The instructions guide the agent to perform shell operations, including executing the inspection script with
nodeand runningnpx playwright testto facilitate playtests and visual regression checks. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from external game URLs and browser contexts (console logs and global variables). This creates a vulnerability surface where malicious game content could attempt to influence the agent's behavior or reports.
- Ingestion points: Browser console output, page errors, and the
window.__THREE_GAME_TEST_HOOKS__object accessed inscripts/inspect-threejs-canvas.mjs. - Boundary markers: No specific delimiters or safety instructions are used when interpolating browser-originating data into logs or reports.
- Capability inventory: Shell command execution (Node.js) and file system write access for saving screenshots and JSON reports.
- Sanitization: The script implements regex-based validation for the
--stateand--run-idcommand-line arguments to ensure they are safe identifiers.
Audit Metadata