image-to-3d-pipeline
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends using
@gltf-transform/cli, a standard open-source utility for GLTF model optimization hosted on the NPM registry. - [EXTERNAL_DOWNLOADS]: The instructions reference several third-party AI services for 3D generation, including Hunyuan3D (Tencent), Tripo AI, Meshy, and Mixamo (Adobe). All referenced services are relevant to the skill's stated purpose.
- [COMMAND_EXECUTION]: The skill includes a shell command template using
npxto optimize 3D models. This is provided as a reference for the user rather than an automated background task. - [INDIRECT_PROMPT_INJECTION]: While the skill involves processing user-provided images which could theoretically contain adversarial content, it lacks automated execution capabilities that would allow such content to compromise the environment.
- [DYNAMIC_EXECUTION]: The provided React/Three.js code examples use standard dynamic asset loading patterns (
useGLTF) which are routine for web-based 3D applications.
Audit Metadata