threejs-gltf-loading
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill suggests fetching decoder and transcoder files from the JSDelivr CDN (e.g.,
cdn.jsdelivr.net/npm/three@0.186.1/...). JSDelivr is a well-known service, and these files are required for processing compressed 3D assets in three.js. - [COMMAND_EXECUTION]: The documentation mentions using the
gltf-transformCLI tool for validating 3D models. This is a standard utility in the 3D web development ecosystem used to ensure file integrity and specification compliance. - [SAFE]: The JavaScript code snippets provided are boilerplate patterns for the three.js library (version r186). They use standard imports and APIs for scene management and animation without any malicious side effects.
Audit Metadata