object-to-3d
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches the
uvPython package manager from its official domain (astral.sh) to facilitate environment management. - [EXTERNAL_DOWNLOADS]: Downloads the
Brush3D Gaussian Splatting training binary from its official GitHub releases page during the initial environment setup. - [EXTERNAL_DOWNLOADS]: Pulls standard developer dependencies and libraries (such as
open3d,trimesh,three.js, andvite) from established public registries like PyPI and NPM. - [REMOTE_CODE_EXECUTION]: Employs a common installation pattern (
curl | sh) to set upuv, a well-known tool for Python project management. - [REMOTE_CODE_EXECUTION]: Uses
npxto dynamically runvitefor local previews and the@playcanvas/splat-transformutility for data conversion. - [COMMAND_EXECUTION]: Orchestrates local processing by wrapping established command-line tools like
ffmpegandffprobevia Python'ssubprocessmodule for frame extraction and metadata analysis. - [SAFE]: The skill operates entirely within a local environment (
~/.video-to-splat/). No evidence of data exfiltration to external servers or suspicious obfuscation techniques was found in the scripts or instructions.
Audit Metadata