skills/xikhar/atlas/threejs-pipeline/Gen Agent Trust Hub

threejs-pipeline

Pass

Audited by Gen Agent Trust Hub on Jul 24, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns, prompt injections, or obfuscation techniques were detected in the skill instructions or code snippets.
  • [COMMAND_EXECUTION]: The skill uses npx @gltf-transform/cli to perform asset optimization tasks such as inspect, meshopt, and validate. These are standard, well-defined operations necessary for the skill's stated purpose of managing a 3D pipeline.
  • [EXTERNAL_DOWNLOADS]: Fetches the @gltf-transform/cli tool from the official npm registry via npx. This is a standard practice for utilizing well-known development utilities and is considered safe.
  • [DATA_EXFILTRATION]: Utilizes the standard renderer.domElement.toDataURL() API to capture screenshots for the verification loop. This is a local browser operation intended for QA and does not involve sending data to unauthorized external domains.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 24, 2026, 05:28 PM