threejs-3d-generator

Pass

Audited by Gen Agent Trust Hub on Jul 15, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements standard API client functionality for the Tripo 3D service. It uses the urllib.request module for authenticated network communication with api.tripo3d.ai and manages file uploads/downloads within expected project directories.
  • [SAFE]: The documentation follows security best practices by explicitly instructing against storing API keys in code, instead recommending the use of environment variables (TRIPO_API_KEY) or command-line arguments.
  • [SAFE]: The Python script threejs_3d_asset.py performs safe path operations using pathlib and limits file uploads to a 20MB threshold, adhering to the provider's limits.
  • [SAFE]: Integration with external services like Mixamo and BlenderMCP is handled through standard browser interactions and documented workflows without automated privilege escalation or persistence mechanisms.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 15, 2026, 08:24 PM