react-three-fiber
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references standard React and Three.js ecosystem packages such as @react-three/fiber, three, and @react-three/drei. These dependencies are industry-standard libraries for 3D web development.
- [DYNAMIC_EXECUTION]: The skill includes Python utility scripts (scripts/component_generator.py and scripts/scene_setup.py) that generate React component boilerplate. These scripts use static string templates and argparse for configuration; they do not perform unsafe dynamic code execution or runtime compilation.
- [INDIRECT_PROMPT_INJECTION]: Documentation and templates provide patterns for loading external 3D assets (GLTF/GLB models) using URL parameters. This is a standard architectural pattern for 3D applications and does not expose the agent to malicious instruction override.
Audit Metadata