build-threejs-scroll-worlds
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a development framework and set of best practices for creating 3D scrollytelling experiences. It contains legitimate technical documentation, architectural guides, and utility scripts.
- [OBFUSCATION]: The file
demo/secret-pathways-assets/fonts.csscontains Base64 encoded strings within@font-facedeclarations. These are standard WOFF2 font data URIs used for embedding assets directly in CSS, which is a recognized development practice and not a malicious obfuscation attempt. - [INDIRECT_PROMPT_INJECTION]: The skill facilitates the generation of 3D scenes based on user-provided story beats and art direction. While this involves processing untrusted input, the surface area is limited to the generation of Three.js configuration data and semantic DOM elements, posing no significant security risk beyond standard LLM output variability.
- [COMMAND_EXECUTION]: The provided utility script
references/scroll-conductor.jsis a standard frontend JavaScript file that manages scroll progress and animation frames. It does not utilize dangerous functions or execute arbitrary shell commands.
Audit Metadata