threejs-3d-generator
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements standard API client functionality for the Tripo 3D service. It uses the
urllib.requestmodule for authenticated network communication withapi.tripo3d.aiand manages file uploads/downloads within expected project directories. - [SAFE]: The documentation follows security best practices by explicitly instructing against storing API keys in code, instead recommending the use of environment variables (
TRIPO_API_KEY) or command-line arguments. - [SAFE]: The Python script
threejs_3d_asset.pyperforms safe path operations usingpathliband limits file uploads to a 20MB threshold, adhering to the provider's limits. - [SAFE]: Integration with external services like Mixamo and BlenderMCP is handled through standard browser interactions and documented workflows without automated privilege escalation or persistence mechanisms.
Audit Metadata