embed-three-ws-avatar
Pass
Audited by Gen Agent Trust Hub on Aug 15, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to load the
<agent-3d>web component script and 3D model assets (GLB files) from the vendor's official domain atthree.ws. - [SAFE]: The documentation explicitly recommends security best practices, such as using Subresource Integrity (SRI) attributes to verify script contents and performing origin checks when handling
window.messageevents from the Avatar Studio iframe. - [SAFE]: No suspicious patterns such as prompt injection, obfuscation, or unauthorized data access were detected in the instructions or code snippets.
Audit Metadata