threejs-skills

Mostly benign Three.js guidance with low direct abuse potential, but the install-trust story is not fully coherent: the publisher repo reportedly directs users to clone an unrelated third-party GitHub project without verification. That mismatch makes the skill suspicious from a supply-chain perspective, though not malicious.