threejs-procedural-fields
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security risks were identified. The content consists of legitimate technical documentation and mathematical helper functions for Three.js.
- [PROMPT_INJECTION]: The skill uses natural instructional language for its intended purpose without attempting to bypass safety filters or ignore prior instructions.
- [DATA_EXPOSURE]: No hardcoded secrets, sensitive file paths, or network exfiltration patterns were found. The code examples involve local mathematical computations.
- [REMOTE_CODE_EXECUTION]: The skill does not download or execute remote code from external sources. It relies on standard imports from the 'three' package.
- [DYNAMIC_EXECUTION]: The use of Three.js TSL nodes is a standard practice for shader generation and does not involve unsafe dynamic code evaluation or injection techniques.
Audit Metadata