frost-sequence-camera-orbit
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads SVG assets, fonts, and textures during initialization. All assets identified in the registry and source code point to local paths or the official infrastructure at static.heygen.ai.
- [DYNAMIC_EXECUTION]: The application uses the Three.js Shading Language (TSL) to dynamically generate and compile WGSL (WebGPU) shaders at runtime. This is the core engine for the ice material refractions and particle physics simulation.
- [SAFE]: The skill includes its complete TypeScript source code and build system, providing high transparency. Security controls are implemented in the SVG loading logic to ensure that only project assets or data URIs are fetched, preventing potential server-side request forgery (SSRF) or unauthorized data access. Browser storage (IndexedDB and LocalStorage) is used appropriately for caching generated 3D geometry and editor preferences.
Audit Metadata