threejs-textures
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references standard Three.js extensions such as
KTX2Loader,RGBELoader, andEXRLoaderlocated inthree/examples/jsm/loaders/. These are well-known components of the Three.js ecosystem and are used for legitimate asset loading. - [INDIRECT_PROMPT_INJECTION]: The skill provides patterns for loading external assets via URLs (e.g.,
loader.load("texture.jpg")). This represents a standard asset ingestion surface. - Ingestion points: Asset URLs passed to
TextureLoader,CubeTextureLoader,RGBELoader, andEXRLoaderwithinSKILL.mdsnippets. - Boundary markers: None present in the snippets; the agent is expected to provide valid file paths or URLs.
- Capability inventory: The skill uses
THREE.TextureLoader.loadand specialized loaders which perform network operations to fetch textures, environment maps, and video files. - Sanitization: No specific URL validation or sanitization logic is included in the educational examples.
Audit Metadata