threejs-parallax-occlusion-mapping

Pass

Audited by Gen Agent Trust Hub on Aug 30, 2026

Risk Level: SAFEDYNAMIC_EXECUTIONPROMPT_INJECTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [DYNAMIC_EXECUTION]: The skill utilizes Three.js Shading Language (TSL) to dynamically construct shader programs. Specifically, in examples/silhouette-relief/ParallaxOcclusion.js, the march logic is generated using TSL Fn and Loop constructs to compute height-field intersections at runtime. This is the primary function of the skill and is confined to the graphics rendering pipeline.
  • [PROMPT_INJECTION]: The SKILL.md file and references/silhouette-relief-contract.md contain instructional directives, such as "do NOT blindly skip them" and "do not reduce this example," which attempt to influence the agent's prioritization of specific code examples and documentation during its operation.
  • [INDIRECT_PROMPT_INJECTION]:
  • Ingestion points: The skill ingests external height maps and configuration objects as parameters in examples/silhouette-relief/ParallaxOcclusion.js.
  • Boundary markers: No explicit boundary delimiters are used for the texture data or configuration inputs.
  • Capability inventory: The skill possesses capabilities for constructing shader nodes, manipulating UV coordinates, and defining material properties for WebGPU.
  • Sanitization: External inputs are processed through mathematical operations and Three.js framework utilities without specialized sanitization, as the inputs are expected to be numeric or texture-based graphics data.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 30, 2026, 02:29 AM
Security Audit — agent-trust-hub — threejs-parallax-occlusion-mapping