game-asset-pipeline
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill configures Three.js loaders to fetch official Draco decoders from Google's
gstatic.comand KTX2 transcoders fromunpkg.com. These are standard, well-known sources for Three.js dependencies. - [COMMAND_EXECUTION]: The documentation includes a recommended shell command for using
@gltf-transform/clito optimize 3D assets. This is a standard development task and not an automated or hidden execution. - [DATA_EXPOSURE]: The asset manifest system enforces best practices by preventing hardcoded file paths and centralizing asset metadata, which reduces the risk of accidental data exposure through source code.
Audit Metadata