threejs-aaa-graphics-builder
Pass
Audited by Gen Agent Trust Hub on Jul 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a professional developer-oriented tool for improving 3D graphics in Three.js games. It follows a structured approach using checklists and reference-based gates to ensure visual and technical quality.
- [SAFE]: No hardcoded credentials, sensitive file access, or unauthorized network operations were identified. The mentioned 'credential probe' is a runtime check for environment variables necessary for optional external generators, which is standard behavior for integrated AI toolsets.
- [SAFE]: No obfuscation techniques, such as Base64-encoded commands, zero-width characters, or steganographic content, were detected in any of the analyzed files.
- [SAFE]: The skill generates Three.js scripts and GLSL shaders using provided code recipes and templates. This dynamic generation is the intended primary purpose of the skill and poses no security risk within the context of graphics development.
- [SAFE]: The skill has an indirect prompt injection surface through the ingestion of screenshots and JSON performance metrics for visual scoring. However, this ingestion is critical for the skill's function and is managed within a professional development workflow, representing a low and acceptable risk.
Audit Metadata