threejs-interaction

Fail

Audited by Gen Agent Trust Hub on Oct 6, 2026

Risk Level: CRITICAL
Full Analysis
  • [SAFE]: The skill consists of educational documentation and standard code templates for Three.js development. The content focuses on geometric calculations for 3D picking and camera movement.
  • [DATA_EXFILTRATION]: No network activity or access to sensitive local data was observed. The code snippets interact exclusively with standard browser DOM events (click, touch, mousemove) and Three.js scene objects.
  • [REMOTE_CODE_EXECUTION]: The code utilizes standard library imports from the Three.js ecosystem. There are no attempts to download or execute arbitrary scripts from remote or untrusted sources.
  • [COMMAND_EXECUTION]: The skill does not contain any shell commands, subprocess calls, or system-level operations. It is restricted to frontend JavaScript logic for 3D rendering.
  • [OBFUSCATION]: The instructions and code snippets are provided in clear text with no evidence of encoding (Base64, hex), hidden characters, or homoglyph substitution.
Recommendations
  • CRITICAL: 1 file(s) identified as malware by FileRep - DO NOT USE
Audit Metadata
Risk Level
CRITICAL
Analyzed
Oct 6, 2026, 04:20 PM