The Agent Skills Directory

[SAFE]: No malicious patterns, prompt injections, or data exfiltration vectors were identified. The skill acts as a static knowledge base with verified content maintenance scripts.
[REMOTE_CODE_EXECUTION]: The maintenance script scripts/sync-docs.sh contains a command pattern (curl | python3) flagged by automated scanners; manual review confirms this is a benign JSON parsing step (python3 -c "import json,sys; ...") used to extract commit hashes from the GitHub API and does not execute untrusted remote code.
[COMMAND_EXECUTION]: The skill includes a shell script, scripts/sync-docs.sh, intended for library maintenance (synchronizing docs). It uses standard utilities like curl and tar to manage local files and fetch updates from the official Threlte GitHub repository.
[EXTERNAL_DOWNLOADS]: Example components reference assets such as 3D models and textures from trusted or well-known domains including threejs.org, fun-bit.vercel.app, and jsdelivr.net to provide functional demonstrations within the documentation context.

threlte