3d-wood-material
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches the Three.js library from UNPKG (
https://unpkg.com/three@0.169.0/build/three.module.min.js), which is a standard and well-known service for serving NPM packages. - [EXTERNAL_DOWNLOADS]: The skill loads typography resources from Google Fonts (
fonts.googleapis.comandfonts.gstatic.com), which are trusted and common services. - [DYNAMIC_EXECUTION]: The
demo.htmlfile utilizes Three.js'sonBeforeCompilefeature to dynamically patch shaders. This is a standard practice in WebGL development for extending built-in materials and does not involve executing untrusted arbitrary code or user input. - [DATA_EXFILTRATION]: No network operations or file system access patterns were detected that would indicate data exposure or exfiltration. The network activity is limited to fetching legitimate assets (JS library, fonts).
Audit Metadata