3d-assembly-manual
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill's HTML template fetches the Three.js library from cdnjs and font assets from Google Fonts. Both are well-known, trusted services and do not pose a risk.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process user-provided build data and instructions to generate manual content. Although this involves ingesting untrusted input, the provided template safely handles this data using
.textContentfor DOM insertion, which effectively mitigates common injection attacks such as XSS.
Audit Metadata