Skills
Navigate
skills/terminalskills/skills/spline/Gen Agent Trust Hub

spline

Pass

Audited by Gen Agent Trust Hub on Oct 11, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references official Spline infrastructure for assets and runtimes.
  • Fetches the Spline viewer component from https://cdn.spline.design/@splinetool/viewer@2.0.64/build/spline-viewer.js.
  • References hosted 3D scenes on https://prod.spline.design and https://my.spline.design.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for processing external data by loading 3D scenes from URLs.
  • Ingestion points: Scene files are loaded from external URLs (.splinecode files).
  • Boundary markers: None identified for scene data; the agent relies on the @splinetool/runtime for parsing.
  • Capability inventory: The skill allows interaction with the scene via findObjectByName and emitEvent, and reacts to scene events via handlers like onSplineMouseDown.
  • Sanitization: Standard browser and Spline runtime isolation apply to the 3D rendering context.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 11, 2026, 08:20 PM