three-js
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions and code snippets for fetching essential WASM decoders and transcoders for Draco and KTX2 compressed assets from well-known services, specifically Google's gstatic servers and the jsdelivr CDN. These are standard, official dependencies for Three.js applications.
- [SAFE]: The reference material consistently promotes secure coding practices, such as using
textContentinstead ofinnerHTMLfor dynamic UI elements in theDebugPanelpattern to prevent XSS vulnerabilities. - [SAFE]: Extensive guidance is provided for the proper disposal of geometries, materials, and textures, which is a critical best practice in WebGL development to prevent memory leaks and ensure browser stability.
Audit Metadata