threejs-skills
Pass
Audited by Gen Agent Trust Hub on Jul 17, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the Three.js library from Cloudflare's well-known CDN (cdnjs.cloudflare.com). This is a standard and safe practice for web development.
- [COMMAND_EXECUTION]: No malicious shell commands or subprocess calls are present. The skill focuses on client-side JavaScript for rendering 3D scenes.
- [DATA_EXFILTRATION]: No sensitive file paths, credential leakage, or unauthorized network operations were detected. All network access is consistent with loading 3D assets or library scripts.
- [PROMPT_INJECTION]: The skill does not contain instructions that attempt to override agent safety protocols or system prompts. Instructional language is technical and relevant to the skill's purpose.
- [REMOTE_CODE_EXECUTION]: There are no suspicious execution patterns such as piping remote content to a shell. The library import is limited to a specific, well-known graphics library.
Audit Metadata