react-three-fiber
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill acts as a technical guide for using the
@json-render/react-three-fiberlibrary. It defines standard 3D primitives, lights, and environment controls. - [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of external JSON specifications via the
specproperty in theThreeCanvasandThreeRenderercomponents. While this is an ingestion point for untrusted data, the skill mitigates risk by utilizing a strict registry of allowed components (19 specific 3D elements) and providing Zod schemas for prop validation. This structure prevents arbitrary code execution or unexpected agent behavior during the rendering process.
Audit Metadata