game-3d-assets
Pass
Audited by Gen Agent Trust Hub on Apr 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads 3D model assets in binary GLB/GLTF format from trusted organizations and well-known repositories, including the official Three.js repository and the Khronos Group sample asset library. These assets are non-executable and used strictly for rendering within a Three.js environment.
- [COMMAND_EXECUTION]: The skill uses standard shell utilities such as curl and cp, along with local Node.js helper scripts, to manage the acquisition and processing of 3D models. These commands are transparently documented and align with the skill's stated purpose of automating asset pipelines.
- [SAFE]: The skill implements secure credential management by instructing users to store sensitive API keys in .env files rather than hardcoding them. It also includes verification logic to check for the presence of these keys in the environment before execution, which is a standard safety practice.
Audit Metadata