threejs-scroll-worlds
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security vulnerabilities were detected. The skill focuses entirely on providing architectural standards for web design and 3D rendering.
- [EXTERNAL_DOWNLOADS]: The skill references projects and assets hosted on GitHub. These references are documented neutrally as they target well-known, established developer services for legitimate documentation and resource sharing.
- [OBFUSCATION]: Base64 encoded data is present in
demo/secret-pathways-assets/fonts.css. This is a standard practice for embedding WOFF2 web fonts and does not contain executable logic or hidden malicious instructions. - [DATA_EXPOSURE]: No hardcoded credentials, sensitive file paths, or private data access points were found. The skill operates within the expected scope of a client-side web development toolkit.
- [REMOTE_CODE_EXECUTION]: The skill uses a bundled, local version of the Three.js library and explicitly instructs users to avoid remote dependencies for the demo, minimizing supply-chain risk.
Audit Metadata