threejs-gameplay-systems
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a development toolkit for building Three.js browser games. A thorough audit of the game scaffold, utility scripts, and technical references revealed no evidence of malicious intent, credential exfiltration, or obfuscation.
- [COMMAND_EXECUTION]: The skill includes a Python utility
scripts/create_threejs_game.pythat facilitates the scaffolding of new projects. This script performs standard local file system operations, such as creating directories and copying local assets usingshutilandpathlib. It includes safety mechanisms like a--forceflag to prevent unintentional data loss when targeting non-empty directories. - [NO_CODE]: The core gameplay implementation is provided as a TypeScript template for developer use. The logic follows standard game development patterns (e.g., input controllers, rendering loops, entity-component boundaries) and interacts with the browser environment through official Three.js and Web Audio APIs.
- [REMOTE_CODE_EXECUTION]: No remote code execution vulnerabilities were found. All external dependencies are managed through standard package registries (NPM/PyPI) and are consistent with the skill's stated purpose.
Audit Metadata