threejs-game-model-pipeline
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill defines a structured engineering workflow for 3D asset production, focusing on technical constraints and manual review cycles.
- [COMMAND_EXECUTION]: The skill utilizes a local Node.js script (
validate-model.mjs) to verify asset integrity. Technical analysis of the script confirms it performs passive structure analysis of GLB/glTF files. It implements security best practices, such as validating file paths to prevent directory traversal and symlink-based escape attacks. - [INDIRECT_PROMPT_INJECTION]: While the skill processes outputs from external AI tools (image generators and Blender MCP), it enforces a strict 'Human-in-the-Loop' review process and automated technical validation. These controls mitigate the risk of malicious instructions being embedded in asset metadata or data structures.
- [EXTERNAL_DOWNLOADS]: The skill references official documentation for the three.js library. These are informational links to trusted resources and do not involve the execution of remote code.
Audit Metadata