three-js

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions and code snippets for fetching essential WASM decoders and transcoders for Draco and KTX2 compressed assets from well-known services, specifically Google's gstatic servers and the jsdelivr CDN. These are standard, official dependencies for Three.js applications.
  • [SAFE]: The reference material consistently promotes secure coding practices, such as using textContent instead of innerHTML for dynamic UI elements in the DebugPanel pattern to prevent XSS vulnerabilities.
  • [SAFE]: Extensive guidance is provided for the proper disposal of geometries, materials, and textures, which is a critical best practice in WebGL development to prevent memory leaks and ensure browser stability.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 01:01 PM