threejs-screenshot
Pass
Audited by Gen Agent Trust Hub on Nov 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions specify using the open tool with the command parameter to execute a local development server, such as bunx vite. This is a standard operation for previewing and screenshotting local Three.js projects.\n- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external web content via the url parameter in the open tool to generate visual metadata and screenshots. While this creates a surface for indirect prompt injection, it is the primary intended purpose of the skill. Ingestion points: The url parameter used by the open tool. Boundary markers: No specific delimiters or safety instructions are defined for the ingested content. Capability inventory: The skill facilitates shell command execution (e.g., bunx vite) and file reading via its associated tools. Sanitization: No explicit sanitization or filtering of the external web content is described.
Audit Metadata