regenerate-3d
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs users to install the
vibedgamespackage globally vianpm install -g vibedgames. This downloads and executes code from the public npm registry that is not from a trusted or well-known organization.\n- [COMMAND_EXECUTION]: The skill relies on the execution of thevg generateCLI andgltf-transformCLI for asset processing and management of generative jobs.\n- [INDIRECT_PROMPT_INJECTION]:\n - Ingestion points: The
CREATE-YOUR-OWNflow (SKILL.md) takes user-provided prompts to generate character images and 3D models via models like FLUX.2.\n - Boundary markers: There are no explicit markers or instructions to isolate user input or prevent it from containing instructions that might influence agent behavior during the generation process.\n
- Capability inventory: The skill possesses the capability to execute shell commands (
vg generate) and write to the filesystem (bundled static HTML and Three.js assets).\n - Sanitization: No sanitization, filtering, or validation of user-provided prompt strings is described before they are passed to the remote generation endpoints.
Audit Metadata