google-3d-tiles-r3f
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches 3D geospatial data and root configuration files from the official Google Maps API domain (
tile.googleapis.com). - [EXTERNAL_DOWNLOADS]: The implementation loads Draco mesh decoders from Google's static asset content delivery network (
www.gstatic.com). - [INDIRECT_PROMPT_INJECTION]: The skill is configured to ingest external 3D tile data. This data consists of structured rendering assets (geometry and binary metadata) and does not influence the agent's prompt context or instructional logic.
- [SAFE]: The skill demonstrates secure handling of API credentials by utilizing environment variables (
process.env.NEXT_PUBLIC_GOOGLE_MAPS_API_KEY) for authentication instead of hardcoding sensitive keys.
Audit Metadata