threejs-primitive-reconstructor
Warn
Audited by Snyk on Jul 21, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). The skill's bundled HTML import map loads remote Three.js modules at runtime from https://unpkg.com/three@0.160.0/build/three.module.js and https://unpkg.com/three@0.160.0/examples/jsm/, which fetches and executes third-party code that the skill depends on.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata