threejs-interaction
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard documentation and code snippets for Three.js development, covering interaction techniques such as raycasting, camera controls, and gizmos.
- [REMOTE_CODE_EXECUTION]: No remote code execution patterns or suspicious external script downloads were detected. Imports are restricted to the standard 'three' library and its official addons.
- [DATA_EXFILTRATION]: No network operations or sensitive data access patterns were found. The code operates entirely within the local browser environment using standard DOM and Three.js APIs.
- [PROMPT_INJECTION]: The content consists purely of technical instructions and code examples without any attempts to override agent behavior or bypass safety guidelines.
- [OBFUSCATION]: No hidden characters, encoded strings, or other obfuscation techniques were identified in the text or code.
- [INDIRECT_PROMPT_INJECTION]: While the skill describes handling user input (pointer events), the input consists of numeric coordinates used for geometric calculations (raycasting) and does not involve processing untrusted natural language data that could influence the agent's logic.
Audit Metadata