NYC

3d-visualizer

Pass

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS] (SAFE): The skill instructs the user to install well-known and industry-standard packages from the npm registry, specifically three, @react-three/fiber, and @react-three/drei, which are necessary for the skill's primary function.
  • [PROMPT_INJECTION] (SAFE): No attempt to override system prompts, bypass safety filters, or use adversarial role-play patterns was detected in the skill instructions or metadata.
  • [COMMAND_EXECUTION] (SAFE): The skill does not contain instructions for arbitrary command execution or unauthorized subprocess spawning. Scripts provided are standard React and Three.js frontend code.
  • [DATA_EXFILTRATION] (SAFE): No evidence of hardcoded credentials, sensitive file access (such as SSH keys or env files), or network exfiltration patterns to external domains was found.
  • [DYNAMIC_EXECUTION] (SAFE): All provided code snippets utilize static logic. There is no use of eval(), exec(), or dynamic script generation from untrusted sources.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 17, 2026, 05:05 PM