three
Pass
Audited by Gen Agent Trust Hub on May 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill imports the Three.js library via a script tag using the jsDelivr CDN (https://cdn.jsdelivr.net/npm/three@0.181.2/+esm). jsDelivr is a well-known and reputable service for hosting open-source libraries.
- [COMMAND_EXECUTION]: The instructions include standard development commands (
npx hyperframes lintandnpx hyperframes validate) for checking the integrity of the composition. These are legitimate utility commands associated with the skill's stated purpose. - [SAFE]: The skill demonstrates best practices for deterministic WebGL rendering and does not contain any patterns indicative of prompt injection, data exfiltration, or obfuscation.
Audit Metadata