smithsonian3d-assets
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches 3D asset metadata and model files (GLB, USDZ, OBJ) from official Smithsonian API endpoints and public S3 buckets. These are well-known, trusted sources for museum open-access data.
- [COMMAND_EXECUTION]: The skill performs no shell command execution or subprocess spawning.
- [DATA_EXFILTRATION]: No sensitive local file access or unauthorized data exfiltration patterns were detected. Network activity is limited to the stated purpose of interacting with Smithsonian resources.
- [INDIRECT_PROMPT_INJECTION]: The skill processes structured JSON and XML data from Smithsonian APIs. It implements safe path handling by using only the filename component of source URLs, effectively preventing directory traversal attacks during the download process.
Audit Metadata