threejs-physics
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill contains standard educational content and implementation examples for the Rapier physics engine (@dimforge/rapier3d-compat and @react-three/rapier). The code follows established best practices for 3D physics simulation in web environments.\n- [INDIRECT_PROMPT_INJECTION]: The skill instructions involve processing external 3D model data (GLTF) to generate physics colliders. This constitutes a data ingestion surface where model properties are used to drive simulation logic.\n
- Ingestion points: Loading model data via
useGLTFinreferences/r3f.mdand traversing scene nodes inreferences/vanilla.md.\n - Boundary markers: No explicit delimiters are suggested for the ingested model data to prevent instruction injection.\n
- Capability inventory: The skill facilitates physics calculations and rendering; it does not include instructions for network exfiltration, file system modification, or process execution.\n
- Sanitization: The extraction of vertex data for colliders effectively sanitizes the input by ignoring non-geometric data structures.
Audit Metadata