3d-chladni-render
Pass
Audited by Gen Agent Trust Hub on Aug 11, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill clones the source code for the 3D Chladni renderer from a specific GitHub repository (
https://github.com/nolangz/3D-Chladni.git). This is a legitimate source for the skill's primary functionality. - [COMMAND_EXECUTION]: The skill executes
git,npm,ffmpeg, andffprobecommands. These are used for standard operations: cloning the repository, installing dependencies vianpm ci, and validating the resulting video output. The commands are constructed using argument lists (avoiding shell interpolation) and undergo validation (e.g., checking numeric ranges for dimensions and duration) before execution. - [REMOTE_CODE_EXECUTION]: The script runs
npm cito install project dependencies. While this involves downloading and executing Node.js packages, it is restricted to the specific repository required for rendering and is controlled by the skill's logic. - [DATA_EXFILTRATION]: No patterns of data exfiltration were detected. Network access is restricted to the initial Git clone and standard package installation.
Audit Metadata