add-3d-assets
Pass
Audited by Gen Agent Trust Hub on Apr 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local utility scripts (e.g.,
meshy-generate.mjsandfind-3d-asset.mjs) located within the skill's root directory to perform specialized tasks like model generation and asset retrieval. - [CREDENTIALS_UNSAFE]: The instructions guide the agent to check for the
MESHY_API_KEYwithin the local.envfile or to prompt the user for it if missing. This is a standard and transparent method for managing third-party service credentials in development tools. - [EXTERNAL_DOWNLOADS]: The skill fetches 3D assets from well-known and reputable services such as Poly Haven and Sketchfab, which is the intended functionality of an asset integration tool.
Audit Metadata