threejs-loaders
Pass
Audited by Gen Agent Trust Hub on Mar 14, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes configuration for fetching auxiliary decoding scripts from external sources.
- Fetches Draco mesh decoders from Google's official static content domain (gstatic.com).
- Fetches Basis texture transcoders from the official Three.js package hosted on the jsDelivr CDN.
- [SAFE]: No malicious patterns such as prompt injection, data exfiltration, or obfuscation were detected. The logic is consistent with the stated purpose of 3D asset management.
Audit Metadata