threejs-earth-render
Warn
Audited by Snyk on Jul 24, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 1.00). The skill clones/updates and serves the remote repository https://github.com/vibe-motion/threejs-earth.git at runtime (git clone/fetch/pull in scripts/render_threejs_earth.py), and that repository's JavaScript is executed by Puppeteer in the browser, so fetched remote code directly controls runtime behavior.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata