The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill instructs the user to install official packages from the @babylonjs/* NPM scope. These are well-known, trusted libraries within the web development ecosystem.
[DYNAMIC_EXECUTION]: The skill demonstrates the use of dynamic imports for the @babylonjs/inspector package to optimize production bundles. This is a standard and safe performance optimization pattern in modern JavaScript development.
[REMOTE_CODE_EXECUTION]: The skill mentions that HavokPhysics downloads and compiles a WebAssembly (.wasm) file at runtime and that registerBuiltInLoaders() downloads loaders as needed. This is documented behavior for the official Babylon.js library and is restricted to the library's own functionality.
[COMMAND_EXECUTION]: Includes a recommendation to use @babylonjs/mcp-servers via npx. Since this targets the official vendor's package scope, it is considered a legitimate developer tool operation within this context.
[INDIRECT_PROMPT_INJECTION]: The skill facilitates loading external 3D models (glTF/GLB). While loading untrusted assets always carries a theoretical risk for the rendering engine, the skill uses standard API calls and does not introduce specific vulnerabilities or bypass safety controls.

babylonjs