threejs-gameplay-systems
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a Python script (scripts/create_threejs_game.py) for scaffolding new game projects and a Node.js script (scripts/inspect-threejs-canvas.mjs) for automated visual testing. Both scripts operate locally on project files and standard browser testing APIs without executing untrusted external commands.- [EXTERNAL_DOWNLOADS]: The skill uses and recommends standard packages from the npm registry, including Three.js, lil-gui, and the Rapier physics engine. These dependencies are well-known and originate from trusted sources in the web development ecosystem.- [INDIRECT_PROMPT_INJECTION]: The system includes a diagnostic bridge that passes game state data from the browser to a local test runner. This data flow is used strictly for reporting and does not include any automated execution of the processed data.- [OBFUSCATION]: Analysis of all scripts and documentation confirmed the absence of obfuscated code, hidden character patterns (such as zero-width spaces), or encoded payloads.
Audit Metadata