threejs-pipeline
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, prompt injections, or obfuscation techniques were detected in the skill instructions or code snippets.
- [COMMAND_EXECUTION]: The skill uses
npx @gltf-transform/clito perform asset optimization tasks such asinspect,meshopt, andvalidate. These are standard, well-defined operations necessary for the skill's stated purpose of managing a 3D pipeline. - [EXTERNAL_DOWNLOADS]: Fetches the
@gltf-transform/clitool from the official npm registry vianpx. This is a standard practice for utilizing well-known development utilities and is considered safe. - [DATA_EXFILTRATION]: Utilizes the standard
renderer.domElement.toDataURL()API to capture screenshots for the verification loop. This is a local browser operation intended for QA and does not involve sending data to unauthorized external domains.
Audit Metadata