scenario-playable-ads

This is a local GLB conversion utility with no network or credential access. It writes generated JavaScript and image files, and unvalidated --name and --glb values can inject JavaScript into the generated source; --out, --tex, and --preview can also target paths outside the project root. Treat it as a security risk when arguments or GLB inputs are untrusted; no direct malware behavior is evident.