harmony-models
Pass
Audited by Gen Agent Trust Hub on Nov 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is entirely instructional, providing Three.js code snippets, procedural generation logic, and best practices for web-based 3D assets without any executable scripts or hidden malicious patterns.- [EXTERNAL_DOWNLOADS]: The documentation references well-known and trusted 3D asset libraries, including Kenney, Quaternius, and Poly Haven, which are established resources for developers to source CC0 models.- [COMMAND_EXECUTION]: Provides detailed guidance for using standard industry tools such as gltf-transform and Blender to optimize model scale, budget, and compression for web performance.- [INDIRECT_PROMPT_INJECTION]: The skill defines a dialogue where the agent asks the developer for project requirements and style preferences. It does not ingest or process untrusted external data from sources like web pages or third-party APIs, which minimizes the surface for automated injection attacks.
Audit Metadata