add-3d-assets

Pass

Audited by Gen Agent Trust Hub on Apr 22, 2026

Risk Level: SAFECOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes local utility scripts (e.g., meshy-generate.mjs and find-3d-asset.mjs) located within the skill's root directory to perform specialized tasks like model generation and asset retrieval.
  • [CREDENTIALS_UNSAFE]: The instructions guide the agent to check for the MESHY_API_KEY within the local .env file or to prompt the user for it if missing. This is a standard and transparent method for managing third-party service credentials in development tools.
  • [EXTERNAL_DOWNLOADS]: The skill fetches 3D assets from well-known and reputable services such as Poly Haven and Sketchfab, which is the intended functionality of an asset integration tool.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 22, 2026, 12:00 AM