glb-compressor-library
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The library invokes the
gltfpackutility as a subprocess during the final compression phase. This is a core feature of the library and is governed by a defined execution timeout (GLTFPACK_TIMEOUT_MS) to prevent resource exhaustion. - [EXTERNAL_DOWNLOADS]: The skill depends on established, well-known industry packages for graphics and image processing, including
sharp,draco3dgltf, andmeshoptimizer. - [SAFE]: The skill implements proactive security measures, including a
sanitizeFilenameutility to prevent path traversal attacks and awithTempDirfunction to ensure all intermediate file operations occur within isolated, self-cleaning environments.
Audit Metadata