threejs-game-asset-integration

Pass

Audited by Gen Agent Trust Hub on Oct 23, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill consists of documentation and utility scripts for game development. A thorough analysis of the logic and file operations revealed no malicious patterns or vulnerabilities. All operations are handled by local scripts with defined scopes.
  • [COMMAND_EXECUTION]: The use of execFileSync to run Git commands is restricted to test fixture setup in temporary directories, which is a common and safe practice for local development testing within this context.
  • [DATA_EXPOSURE]: No evidence of hardcoded credentials, sensitive file access, or unauthorized data exfiltration was found.
  • [REMOTE_CODE_EXECUTION]: The skill does not download external scripts or execute code from untrusted sources. The scripts perform internal data processing and use standard Node.js built-in modules.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 23, 2026, 02:05 PM