spline-interactive
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a legitimate developer utility for Spline 3D integration, providing comprehensive documentation and boilerplate generation scripts for React-based workflows.
- [COMMAND_EXECUTION]: The included Python scripts (
project_generator.pyandcomponent_builder.py) are designed for local project scaffolding. They utilize standard library modules to create directories and write static boilerplate files based on user-provided names, with no evidence of arbitrary command execution or malicious system modifications. - [EXTERNAL_DOWNLOADS]: The skill references official and well-known Spline packages (
@splinetool/react-spline,@splinetool/runtime) and documentation from the tool's official domain. These are standard dependencies for the intended functionality. - [INDIRECT_PROMPT_INJECTION]: While the skill involves loading external 3D scenes via URLs, this is the core intended purpose of the Spline component and does not introduce vulnerabilities beyond the standard operation of the third-party 3D runtime environment.
Audit Metadata