skills/puntorigen/skills/object-to-3d/Gen Agent Trust Hub

object-to-3d

Pass

Audited by Gen Agent Trust Hub on Jul 8, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches the uv Python package manager from its official domain (astral.sh) to facilitate environment management.
  • [EXTERNAL_DOWNLOADS]: Downloads the Brush 3D Gaussian Splatting training binary from its official GitHub releases page during the initial environment setup.
  • [EXTERNAL_DOWNLOADS]: Pulls standard developer dependencies and libraries (such as open3d, trimesh, three.js, and vite) from established public registries like PyPI and NPM.
  • [REMOTE_CODE_EXECUTION]: Employs a common installation pattern (curl | sh) to set up uv, a well-known tool for Python project management.
  • [REMOTE_CODE_EXECUTION]: Uses npx to dynamically run vite for local previews and the @playcanvas/splat-transform utility for data conversion.
  • [COMMAND_EXECUTION]: Orchestrates local processing by wrapping established command-line tools like ffmpeg and ffprobe via Python's subprocess module for frame extraction and metadata analysis.
  • [SAFE]: The skill operates entirely within a local environment (~/.video-to-splat/). No evidence of data exfiltration to external servers or suspicious obfuscation techniques was found in the scripts or instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 8, 2026, 03:29 AM
Security Audit — agent-trust-hub — object-to-3d