3d-image-renderer
Warn
Audited by Socket on Jul 9, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
BENIGN in purpose and data flow, but SUSPICIOUS on install trust: the skill performs a coherent local 3D render pipeline yet relies on an undocumented bundled prebuilt native `gl` binary. Because that executable is not verifiably sourced from an official registry or same-org release path, the overall security risk is high despite low evidence of malicious intent.
Confidence: 86%Severity: 72%
Audit Metadata