vantajs
Pass
Audited by Gen Agent Trust Hub on Nov 11, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides recipes that reference standard, well-known CDNs (cdnjs.cloudflare.com and cdn.jsdelivr.net) for loading Three.js and Vanta.js. These are standard practices for web development and target legitimate library distributions.
- [COMMAND_EXECUTION]: There are no shell commands, system calls, or subprocess executions detected in the skill instructions or provided scripts.
- [DATA_EXFILTRATION]: No sensitive file access or network exfiltration patterns were found. The code operates entirely within the client-side browser environment for decorative purposes.
- [REMOTE_CODE_EXECUTION]: While the skill instructions facilitate the inclusion of remote JavaScript libraries via script tags, these are constrained to specific, reputable library paths for Three.js and Vanta.js without any dynamic execution of untrusted payloads (e.g., no curl-to-bash patterns).
Audit Metadata