webgl-raymarched-hero

Pass

Audited by Gen Agent Trust Hub on Sep 10, 2026

Risk Level: SAFEDYNAMIC_EXECUTION
Full Analysis
  • [DYNAMIC_EXECUTION]: The skill uses runtime compilation for WebGL shaders via gl.compileShader. This is a standard and necessary operation for fragment-shader-based 3D rendering. The shader source code is defined within the local script and does not involve untrusted external strings.
  • [SAFE]: The skill is designed to produce self-contained HTML artifacts for 3D design prototyping. All resources are local, and the instructions explicitly state to use 'zero external requests'. No patterns related to data exfiltration, persistence, or privilege escalation were found.
  • [SAFE]: All external references, such as the author URL and homepage, point to the vendor's own infrastructure (nexu-io), which is consistent with the provided author context and does not indicate typosquatting or impersonation.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 10, 2026, 10:19 AM
Security Audit — agent-trust-hub — webgl-raymarched-hero