react-three-game
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive documentation and implementation patterns for a 3D game engine integration. All identified behaviors, including asset loading and component registration, are standard for game development frameworks.
- [EXTERNAL_DOWNLOADS]: The skill includes components like
ModelandPrefabRefwhich are designed to load 3D assets and nested JSON configurations from URLs or local paths. These operations are performed within the context of the React Three Fiber environment and are fundamental to the skill's purpose of rendering remote or local game data. - [INDIRECT_PROMPT_INJECTION]: The skill defines an architecture that ingests external JSON data to build scenes. While this creates a surface where an agent could potentially encounter malicious instructions within a prefab's text-based properties, the framework itself only uses this data for rendering and internal state management. It lacks dangerous capabilities such as arbitrary shell execution or file system writes, which mitigates the risk of a successful injection attack.
Audit Metadata