threejs-builder
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a Python script (
scripts/install-gltf-calibration-helpers.py) intended to facilitate the deployment of a helper module into a project's directory. - [COMMAND_EXECUTION]: Instructions guide the developer to start a local development environment using Python's built-in HTTP server module.
- [EXTERNAL_DOWNLOADS]: The skill fetches the Three.js core library and various utility modules (such as GLTFLoader, OrbitControls, and EffectComposer) from the unpkg.com CDN.
- [EXTERNAL_DOWNLOADS]: The Draco mesh compression decoder is downloaded from Google's official gstatic.com CDN for 3D model decompression.
- [EXTERNAL_DOWNLOADS]: References the cannon-es physics library via the unpkg.com CDN for implementing physical interactions in 3D scenes.
Audit Metadata