threejs-skills

Pass

Audited by Gen Agent Trust Hub on Sep 26, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches the Three.js library (version r128) from the official Cloudflare cdnjs service at https://cdnjs.cloudflare.com/ajax/libs/three.js/r128/three.min.js. This is a common and expected practice for Web-based 3D development.
  • [INDIRECT_PROMPT_INJECTION]: The skill acts as a template for generating 3D graphics code based on user requests. While it ingests untrusted user data to define scene parameters (like object shapes or colors), the generated code is constrained to Three.js API calls and standard DOM manipulations, presenting a low risk for exploitation within the agent's context.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 26, 2026, 08:12 PM