hy-3d-gen
Pass
Audited by Gen Agent Trust Hub on Jul 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill communicates with Tencent Hunyuan 3D APIs at tokenhub.tencentmaas.com. These requests are necessary for the skill's primary function of generating 3D models.
- [EXTERNAL_DOWNLOADS]: The skill documentation advises users to manually install the tencentcloud-sdk-python package if they intend to use the Tencent Cloud SDK backend. This package is managed by Tencent, a well-known service provider.
- [CREDENTIALS_UNSAFE]: The skill implements a secure credential loading mechanism that only reads specific, pre-defined environment variables from a local .env file. It does not hardcode any sensitive information.
- [PROMPT_INJECTION]: The instructions in SKILL.md include constraints for the AI agent to ensure it uses the provided tools correctly and does not generate false information about model outputs.
Audit Metadata