{"data":{"skill":{"slug":"heygen-com-three","name":"three","icon":"📦","repo":"https://github.com/heygen-com/hyperframes/tree/main/skills/three/","status":"approved","author":"heygen-com","authorVersion":null,"skillstoreRevision":null},"audit":{"id":"3690b8ae-43ed-49e3-8947-88afe6fecaf7","skill_id":"2e8ea154-65ec-47c4-a997-dafa762bd365","version":2,"content_hash":"fd08e929995e85712a90e1f3584a933c","risk_level":"low","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":null,"manual_install_policy":null,"summary":"Static analysis reported many command execution hits, but they are Markdown inline code, fenced examples, or user-run validation commands. No malicious intent, prompt injection, credential access, or data exfiltration evidence was found. The remaining risks are low supply-chain exposure from a CDN import example and local project commands.","remediation":[],"risk_factor_evidence":[{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":8,"line_start":8},{"file":"SKILL.md","line_end":14,"line_start":14},{"file":"SKILL.md","line_end":16,"line_start":16},{"file":"SKILL.md","line_end":18,"line_start":18},{"file":"SKILL.md","line_end":22,"line_start":22},{"file":"SKILL.md","line_end":56,"line_start":56},{"file":"SKILL.md","line_end":58,"line_start":58},{"file":"SKILL.md","line_end":64,"line_start":64},{"file":"SKILL.md","line_end":70,"line_start":70},{"file":"SKILL.md","line_end":75,"line_start":75},{"file":"SKILL.md","line_end":77,"line_start":77},{"file":"SKILL.md","line_end":82,"line_start":82},{"file":"SKILL.md","line_end":87,"line_start":87},{"file":"SKILL.md","line_end":100,"line_start":97},{"file":"SKILL.md","line_end":105,"line_start":104}]},{"factor":"network","evidence":[{"file":"SKILL.md","line_end":25,"line_start":25},{"file":"SKILL.md","line_end":105,"line_start":105},{"file":"SKILL.md","line_end":106,"line_start":106}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[{"title":"Markdown Syntax Misclassified as Shell Execution","locations":[{"file":"SKILL.md","line_end":8,"line_start":8},{"file":"SKILL.md","line_end":14,"line_start":14},{"file":"SKILL.md","line_end":16,"line_start":16},{"file":"SKILL.md","line_end":18,"line_start":18},{"file":"SKILL.md","line_end":22,"line_start":22},{"file":"SKILL.md","line_end":56,"line_start":56},{"file":"SKILL.md","line_end":58,"line_start":58},{"file":"SKILL.md","line_end":64,"line_start":64},{"file":"SKILL.md","line_end":70,"line_start":70},{"file":"SKILL.md","line_end":75,"line_start":75},{"file":"SKILL.md","line_end":77,"line_start":77},{"file":"SKILL.md","line_end":82,"line_start":82},{"file":"SKILL.md","line_end":87,"line_start":87},{"file":"SKILL.md","line_end":100,"line_start":97},{"file":"SKILL.md","line_end":105,"line_start":104}],"confidence":0.96,"description":"The reported Ruby backtick locations are Markdown code markers, inline code, and documentation examples. They do not execute by themselves.","confidence_reasoning":"The file is Markdown documentation, and the suspicious tokens are code formatting or sample commands. No executable Ruby or shell wrapper is present."},{"title":"Remote CDN Import in Browser Example","locations":[{"file":"SKILL.md","line_end":25,"line_start":25}],"confidence":0.78,"description":"The example imports Three.js from jsDelivr. This is legitimate documentation, but users should consider pinned local dependencies for production.","confidence_reasoning":"The URL is a pinned Three.js ESM import in an example. It creates supply-chain exposure only if copied into production unchanged."},{"title":"External Documentation Links","locations":[{"file":"SKILL.md","line_end":105,"line_start":105},{"file":"SKILL.md","line_end":106,"line_start":106}],"confidence":0.94,"description":"The hardcoded Three.js documentation URLs are reference links. They do not send local data or credentials.","confidence_reasoning":"The links point to public Three.js documentation pages. No request code or data transmission behavior appears around them."},{"title":"False Positive Crypto and Reconnaissance Signals","locations":[{"file":"SKILL.md","line_end":3,"line_start":3},{"file":"SKILL.md","line_end":16,"line_start":16},{"file":"SKILL.md","line_end":87,"line_start":85}],"confidence":0.93,"description":"No weak cryptographic algorithm or system reconnaissance behavior was found. The flagged lines contain description text and animation timing guidance.","confidence_reasoning":"Manual review found no cryptographic API, host probing, environment inspection, or filesystem enumeration. The flagged context is rendering advice."}],"dangerous_patterns":[{"title":"User-Run Validation Commands","locations":[{"file":"SKILL.md","line_end":100,"line_start":97}],"confidence":0.84,"description":"The skill suggests running HyperFrames validation commands. This is expected tooling guidance, but users should run it inside trusted projects.","confidence_reasoning":"The commands are visible documentation examples and are not hidden or automated. They still execute local package tooling when a user runs them."},{"title":"Remote Module Import Example","locations":[{"file":"SKILL.md","line_end":25,"line_start":25}],"confidence":0.78,"description":"The sample uses a remote ESM dependency URL. This is transparent and versioned, but production users should review dependency sourcing.","confidence_reasoning":"The import target is an established CDN and a pinned Three.js version. The risk depends on whether users copy the pattern."}],"files_scanned":1,"total_lines":107,"audit_model":"codex","audited_at":"2026-06-30T02:34:19.41+00:00","created_at":"2026-06-30T03:13:59.964932+00:00","static_findings":[],"finding_verdicts":[],"semantic_findings":[],"subject_marketplace_commit_sha":null,"subject_content_hash":null,"subject_tree_hash":null,"subject_plugin_path":null,"audit_payload_hash":null,"confirmed_risk_level":null,"scanner_version":null,"policy_version":null,"subject":{"marketplaceCommitSha":null,"contentHash":null,"treeHash":null,"pluginPath":null,"auditPayloadHash":null},"scannerVersion":null,"policyVersion":null},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"not_attestable","url":null,"status":null,"reason":"canonical install advisories are incomplete"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":2,"needsReviewCount":0,"falsePositiveCount":2,"agentAutoInstallPolicy":null,"manualInstallPolicy":null,"artifactSignatureState":"available","attestationState":"not_attestable","verificationState":"not_verified"},"isLatest":false}}