threejs-loaders
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references official Google (gstatic.com) and jsDelivr (cdn.jsdelivr.net) repositories for necessary asset decoders, which are trusted well-known services.
- [COMMAND_EXECUTION]: All code is restricted to Three.js client-side operations; no shell commands or system-level calls are present.
- [DATA_EXFILTRATION]: No patterns for accessing sensitive files or exfiltrating data to untrusted domains were identified.
- [PROMPT_INJECTION]: The instructions are purely technical and do not attempt to manipulate agent behavior or bypass safety constraints.
Audit Metadata