threejs-landscape
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a set of technical instructions and a reference implementation for 3D rendering. A thorough analysis of the provided code snippets and the demo HTML file revealed no malicious patterns such as prompt injection, data exfiltration, or obfuscation.
- [DYNAMIC_EXECUTION]: The skill demonstrates the use of Three.js
onBeforeCompileto inject custom GLSL code into shaders. This is a standard and expected technique for achieving high-performance visual effects (like the described instanced grass) and does not involve the execution of untrusted user input. - [EXTERNAL_DOWNLOADS]: The
demo/index.htmlfile references a local dependencyassets/three.min.js. It does not attempt to load scripts from remote or unverifiable sources. - [INDIRECT_PROMPT_INJECTION]: While the skill is designed to process a user's "subject" to generate a surrounding environment, it acts as a code-generation blueprint rather than an execution engine with sensitive capabilities. The risk of indirect injection is minimal and handled by standard model constraints.
Audit Metadata