threejs-compatibility-fallbacks
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to process user-supplied descriptions of technical environments and feature requirements to generate a fallback strategy.
- Ingestion points: The 'Activate the branch' section in SKILL.md instructs the agent to record the 'user's explicit request' and 'capability-related initialization failure' details.
- Boundary markers: The instructions lack explicit delimiters or instructions to ignore potential commands embedded within user-provided error logs or feature descriptions.
- Capability inventory: The skill identifies architectural paths and classifies behavior. No direct code execution, file system modification, or network exfiltration capabilities are present in the skill's own logic.
- Sanitization: No sanitization or validation of the user-provided input is specified.
Audit Metadata