react-threejs-game
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a style guide for React and Three.js development. It promotes secure coding practices by explicitly warning against loading assets from unvalidated or untrusted user-supplied URLs.
- [INDIRECT_PROMPT_INJECTION]: While the skill discusses handling external assets (textures/models), it mandates strict validation and trusted origins (Rule 14), which is a defensive measure against potential injection via asset metadata or malicious files.
- [NODE_PACKAGES]: The skill references standard, well-known libraries in the 3D web development ecosystem:
@react-three/fiber,@react-three/drei, andthree. These are used for their intended primary purpose.
Audit Metadata