threejs-scene-builder
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides comprehensive and standard implementations for 3D scene management, character animation, and game AI using well-established libraries.
- [COMMAND_EXECUTION]: The skill includes a
scripts/build-scene.tshelper script designed to be executed via Bun to automate the creation of Three.js boilerplate code, which is an expected developer productivity feature. - [DYNAMIC_EXECUTION]: The scaffolding utility
scripts/build-scene.tsuses string templates to generate and write TypeScript source files to the local project directory. - [EXTERNAL_DOWNLOADS]: The skill documentation and code reference downloading 3D models and assets from a well-known and reputable service provider, Ready Player Me (
models.readyplayer.me). - [INDIRECT_PROMPT_INJECTION]: The skill features interfaces that process external strings (such as avatar IDs, model URLs, and pathfinding waypoints), creating an attack surface where untrusted data could be processed by the agent's tools.
Audit Metadata