threejs-landscape

Pass

Audited by Gen Agent Trust Hub on Nov 9, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a set of technical instructions and a reference implementation for 3D rendering. A thorough analysis of the provided code snippets and the demo HTML file revealed no malicious patterns such as prompt injection, data exfiltration, or obfuscation.
  • [DYNAMIC_EXECUTION]: The skill demonstrates the use of Three.js onBeforeCompile to inject custom GLSL code into shaders. This is a standard and expected technique for achieving high-performance visual effects (like the described instanced grass) and does not involve the execution of untrusted user input.
  • [EXTERNAL_DOWNLOADS]: The demo/index.html file references a local dependency assets/three.min.js. It does not attempt to load scripts from remote or unverifiable sources.
  • [INDIRECT_PROMPT_INJECTION]: While the skill is designed to process a user's "subject" to generate a surrounding environment, it acts as a code-generation blueprint rather than an execution engine with sensitive capabilities. The risk of indirect injection is minimal and handled by standard model constraints.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 9, 2026, 05:48 AM