3d-website-builder

Based on the fragment alone, the described functionality (scroll-scrubbed video hero landing page) appears conceptually benign. The primary risk is the installation method: executing a network-fetched `install.sh` via `curl ... | bash`, which is a high-impact supply-chain vector because the installer’s actual behavior is not provided for verification. Additional uncertainty exists around how user inputs are embedded into generated HTML/JS (escaping/sanitization not verifiable) and whether optional dependencies (e.g., GSAP) are fetched in an unsafe manner.