threejs-procedural-creatures
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a specialized technical implementation guide for generating 3D creature geometry and rigs within the Three.js ecosystem. The instructions focus on mathematical formulas, GPU rendering best practices, and geometric validation.
- [EXTERNAL_DOWNLOADS]: The skill references the
three/webgpupackage, which is the official, well-known library for Three.js. This is a standard and expected dependency for the skill's stated purpose. - [DYNAMIC_EXECUTION]: While the skill uses terms like "compiler" and "compilation," these refer to the generation of Three.js Shading Language (TSL) nodes and the construction of GPU buffers for geometry data, rather than the execution of arbitrary or untrusted host-side code.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a data ingestion surface through "body contracts" and dimensioned specifications. However, the instructions mandate rigorous validation (Step 3: "spec validation, topology... bounds, and geometry identities") and use structured YAML-like formats, which effectively mitigates common injection risks by treating inputs as geometric data rather than instructions.
Audit Metadata