threejs-play
Pass
Audited by Gen Agent Trust Hub on Nov 5, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill body instructs the agent to install the paprika3d package using the command 'npx -y paprika3d serve', which downloads and executes code from a remote registry without user confirmation.
- [EXTERNAL_DOWNLOADS]: The skill references an external documentation URL 'https://paprika3d.com/docs/install' for tool setup and installation instructions.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external three.js web pages.
- Ingestion points: State data is received through the 'interact' tool's frame-by-frame change logs and the 'observe' tool's state readings.
- Boundary markers: No explicit delimiters or boundary markers are used to isolate potentially untrusted game state data from the agent's core instructions.
- Capability inventory: The skill utilizes tools to open URLs and interact with browser sessions ('open', 'interact', 'observe', 'feel').
- Sanitization: No evidence of data sanitization, schema validation, or escaping of the external state content is mentioned in the instructions.
Audit Metadata