threejs
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the official Google-hosted Draco decoders at
https://www.gstatic.com/draco/versioned/decoders/1.5.7/. This is a standard and expected resource for Three.js geometry compression. - [REMOTE_CODE_EXECUTION]: While the skill mentions the use of compute shaders via Three Shader Language (TSL), these are restricted to GPU execution for physics and rendering within the WebGPU environment and do not pose a risk of general-purpose remote code execution.
- [SAFE]: All code snippets for animation, lighting, and scene management follow industry-standard practices. No credential exposure, persistence mechanisms, or obfuscated instructions were detected.
Audit Metadata