3d-cloth-material
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
demo.htmlfile utilizes an import map to fetch the Three.js library fromunpkg.com, which is a well-known and industry-standard content delivery network for JavaScript packages. It also references font assets fromfonts.googleapis.comandfonts.gstatic.com, which are trusted sources for web typography. - [DYNAMIC_EXECUTION]: The skill employs the Three.js
onBeforeCompilefeature to inject custom GLSL shader code for specialized fabric effects (such as weave patterns and sheen). This is a standard and safe practice for advanced WebGL rendering and does not facilitate the execution of arbitrary or malicious commands. - [SAFE]: No malicious patterns were detected. The skill does not attempt prompt injection, credential exfiltration, or persistence. The provided logic is focused entirely on 3D material simulation and follows established development patterns for the Three.js ecosystem.
Audit Metadata