threejs-earth-render

Pass

Audited by Gen Agent Trust Hub on Jul 24, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill clones a 3D Earth visualization repository from 'https://github.com/vibe-motion/threejs-earth.git'. This is the primary function of the skill and points to a specific, non-obfuscated repository.
  • [COMMAND_EXECUTION]: Uses subprocess.run to execute standard development tools including git, npm, node, and ffmpeg for repository management, package installation, frame capture, and video encoding.
  • [EXTERNAL_DOWNLOADS]: Installs the puppeteer package from npm to a local workspace directory to perform browser-based frame capture of the Three.js scene.
  • [COMMAND_EXECUTION]: Launches a headless Chromium instance via Puppeteer with the --no-sandbox and --disable-web-security flags. While these flags reduce browser-level isolation, they are used here in a controlled environment to render a locally-served scene from the cloned repository.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 24, 2026, 01:00 AM
Security Audit — agent-trust-hub — threejs-earth-render