threejs-model-inspect
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill implements a 3D model inspection and rendering utility using local scripts and standard automation practices.- [COMMAND_EXECUTION]: The
render.mjsscript launches a browser (Chrome, Chromium, Edge, or Playwright) usingchild_process.spawn. The script searches for browsers in standard system locations or respects theCHROME_PATHenvironment variable. This is a legitimate requirement for the skill's rendering functionality.- [EXTERNAL_DOWNLOADS]: Theviewer.htmlasset fetches thethree.jslibrary and its addons from the jsDelivr CDN. jsDelivr is a well-known and trusted service for hosting open-source libraries. Therender.mjsscript also includes logic to prioritize local versions of the library if found in the user's project, reducing external dependencies.
Audit Metadata