threejs
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [NO_CODE]: The analyzed file is a metadata descriptor containing frontmatter and usage instructions. It contains no executable logic, scripts, or automated command sequences.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses a potential attack surface for indirect prompt injection, but lacks exploitable capabilities.
- Ingestion points: User queries matching triggers like 'threejs', 'three.js', '3d web', or 'webgl scene' (SKILL.md).
- Boundary markers: Absent.
- Capability inventory: No tools, shell commands, network operations, or file-system access are defined within this skill file.
- Sanitization: Absent.
- [EXTERNAL_DOWNLOADS]: The skill refers to an external GitHub repository (github.com/CloudAI-X/threejs-skills) for users to manually inspect and install additional assets. No automated downloads or remote code executions are initiated by the skill itself.
Audit Metadata