spline-interactive

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a legitimate developer utility for Spline 3D integration, providing comprehensive documentation and boilerplate generation scripts for React-based workflows.
  • [COMMAND_EXECUTION]: The included Python scripts (project_generator.py and component_builder.py) are designed for local project scaffolding. They utilize standard library modules to create directories and write static boilerplate files based on user-provided names, with no evidence of arbitrary command execution or malicious system modifications.
  • [EXTERNAL_DOWNLOADS]: The skill references official and well-known Spline packages (@splinetool/react-spline, @splinetool/runtime) and documentation from the tool's official domain. These are standard dependencies for the intended functionality.
  • [INDIRECT_PROMPT_INJECTION]: While the skill involves loading external 3D scenes via URLs, this is the core intended purpose of the Spline component and does not introduce vulnerabilities beyond the standard operation of the third-party 3D runtime environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 06:45 PM