edu-physics-3d
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill's primary purpose is educational visualization. No malicious patterns, such as prompt injection, persistence mechanisms, or unauthorized privilege escalation, were detected.
- [EXTERNAL_DOWNLOADS]: The provided HTML template fetches several libraries from well-known services, including Cloudflare (cdnjs) and UNPKG. These libraries include Three.js, KaTeX, and Tailwind CSS, which are necessary for the skill's rendering and styling functionality.
- [COMMAND_EXECUTION]: The skill instructions provide a local Python build script template intended to assemble the final HTML artifact. This script facilitates injecting data into the HTML template and resides within the user's local execution environment.
- [COMMAND_EXECUTION]: The generated HTML utilizes a client-side expression engine that uses the
Functionconstructor to evaluate physics-related math expressions in real-time. This dynamic execution is limited to the scope of the simulation within the browser context. - [DATA_EXFILTRATION]: No evidence of data exfiltration or access to sensitive system files (e.g., SSH keys, AWS credentials) was found. File system activity is limited to writing the generated HTML output to the current working directory.
Audit Metadata