threejs-interaction
Fail
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: CRITICALINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for processing user inputs to drive 3D scene interactions.\n
- Ingestion points: Mouse coordinates and keyboard inputs (
clientX,clientY,event.code) captured inSKILL.mdJavaScript snippets.\n - Boundary markers: None; typical for documentation-focused code samples.\n
- Capability inventory: Capabilities are limited to 3D scene rendering and console logging; no network exfiltration or file-writing tools are invoked.\n
- Sanitization: Input is mathematically normalized for 3D coordinate mapping.\n- [SAFE]: Detailed analysis of the provided scripts for Raycaster, OrbitControls, and SelectionBox confirms they are legitimate, standard Three.js implementations without any hidden malicious logic or obfuscation.
Recommendations
- CRITICAL: 1 file(s) identified as malware by FileRep - DO NOT USE
Audit Metadata