inspect-glb
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFE
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill instructions suggest using
npx @gltf-transform/clito process compressed files. This fetches and executes a well-known community tool from the npm registry to ensure asset compatibility. - [INDIRECT_PROMPT_INJECTION]: The skill processes external GLB files to extract metadata. The included script performs binary parsing and validation of the glTF structure before processing, which limits the potential for data-driven attacks.
Audit Metadata