threejs-primitive-reconstructor
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted reference images and generates executable HTML/JS code, which presents a surface for instructions embedded in images to influence code generation.
- Ingestion points: Reference images processed by the agent (SKILL.md).
- Boundary markers: Instructions require an analysis inventory summary and code comments before implementation (SKILL.md).
- Capability inventory: Generates browser-runnable HTML/JS (SKILL.md) and writes files to disk via a Python script (scripts/write_scene_from_template.py).
- Sanitization: No explicit sanitization or filtering of image-derived instructions is implemented.
- [EXTERNAL_DOWNLOADS]: The skill's HTML template and generated code fetch the Three.js library and OrbitControls addon from unpkg.com, a well-known content delivery network.
- [COMMAND_EXECUTION]: The included Python script (scripts/write_scene_from_template.py) is designed to write template content to a file path provided via command-line arguments.
Audit Metadata