game-3d-assets
Pass
Audited by Gen Agent Trust Hub on Mar 13, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads 3D model files from the official Three.js and Khronos Group GitHub repositories, which are recognized as trusted sources for development assets.
- [CREDENTIALS_UNSAFE]: References to API keys for Meshy AI, Sketchfab, and Poly.pizza are handled appropriately by instructing the agent to prompt the user for these credentials rather than hardcoding them.
- [COMMAND_EXECUTION]: The skill executes local utility scripts (such as find-3d-asset.mjs and meshy-generate.mjs) to manage the asset pipeline, which is consistent with the skill's stated purpose and vendor resources.
Audit Metadata