Skills threejs-builder

📦

threejs-builder

Name: threejs-builder
Author: CesarAugustusGroB

Content revision r1 Safe ⚙️ External commands🌐 Network access

Build Three.js Scenes

Creating a clean Three.js scene requires many setup choices. This skill gives Claude, Codex, and Claude Code practical patterns for responsive 3D web apps.

Supports: Claude Codex Code(CC)

📊 74 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "threejs-builder" from https://skillstore.io/skills/cesaraugustusgrob-threejs-builder.md and its manifest at https://skillstore.io/api/skills/cesaraugustusgrob-threejs-builder/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/cesaraugustusgrob-threejs-builder.md Signed manifest GET /api/skills/cesaraugustusgrob-threejs-builder/manifest Signed lockfile GET /api/skills/cesaraugustusgrob-threejs-builder/lockfile

Test it

Using "threejs-builder". Create a minimal animated Three.js object.

Expected outcome:

A responsive browser scene with a camera, renderer, lights, a rotating mesh, and resize behavior.

Using "threejs-builder". Make a 3D portfolio background with interaction.

Expected outcome:

A subtle particle or geometric background with mouse-aware motion, capped pixel ratio, and restrained visual styling.

Using "threejs-builder". Explain how to load a model in Three.js.

Expected outcome:

A concise GLTF workflow covering loader imports, scene placement, auto-centering, lighting, controls, and error handling.

Security Audit

Safe

v10 • 7/9/2026 Open versioned report

Most static external command and reconnaissance alerts are false positives from Markdown code fences, inline code, and Three.js examples. The only confirmed risk is low-severity use of hardcoded unpkg CDN imports in examples, which can expose generated apps to third-party script supply-chain risk. No evidence of prompt injection, data exfiltration, credential access, or malicious intent was found.

Files scanned

789

Lines analyzed

Review items

False positives ignored

Capability review items (14)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Low

references/advanced-topics.md:13

Hardcoded URL

import * as THREE from 'https://unpkg.com/three@0.160.0/build/three.module.js';

The example imports JavaScript modules from unpkg.com, so generated apps may load third-party code over the network. This is legitimate Three.js usage but still a low supply-chain and availability risk.

Low

references/advanced-topics.md:14

Hardcoded URL

import { GLTFLoader } from 'https://unpkg.com/three@0.160.0/examples/jsm/loaders/GLTFLoader.js';

Low

references/advanced-topics.md:15

Hardcoded URL

import { OrbitControls } from 'https://unpkg.com/three@0.160.0/examples/jsm/controls/OrbitControls.j

Low

references/advanced-topics.md:78

Hardcoded URL

import * as THREE from 'https://unpkg.com/three@0.160.0/build/three.module.js';

Low

references/advanced-topics.md:79

Hardcoded URL

import { EffectComposer } from 'https://unpkg.com/three@0.160.0/examples/jsm/postprocessing/EffectCo

Low

references/advanced-topics.md:80

Hardcoded URL

import { RenderPass } from 'https://unpkg.com/three@0.160.0/examples/jsm/postprocessing/RenderPass.j

Low

references/advanced-topics.md:81

Hardcoded URL

import { UnrealBloomPass } from 'https://unpkg.com/three@0.160.0/examples/jsm/postprocessing/UnrealB

Low

references/advanced-topics.md:211

Hardcoded URL

import { RGBELoader } from 'https://unpkg.com/three@0.160.0/examples/jsm/loaders/RGBELoader.js';

Low

references/advanced-topics.md:263

Hardcoded URL

import * as THREE from 'https://unpkg.com/three@0.160.0/build/three.module.js';

Low

references/advanced-topics.md:264

Hardcoded URL

import * as CANNON from 'https://unpkg.com/cannon-es@0.20.0/dist/cannon-es.js';

Low

references/advanced-topics.md:394

Hardcoded URL

import Stats from 'https://unpkg.com/three@0.160.0/examples/jsm/libs/stats.module.js';

Low

SKILL.md:51

Hardcoded URL

import * as THREE from 'https://unpkg.com/three@0.160.0/build/three.module.js';

Low

SKILL.md:221

Hardcoded URL

import * as THREE from 'https://unpkg.com/three@0.160.0/build/three.module.js';

Low

SKILL.md:222

Hardcoded URL

import { OrbitControls } from 'https://unpkg.com/three@0.160.0/examples/jsm/controls/OrbitControls.j

Risk Factors

⚙️ External commands (50)

references/advanced-topics.md:121-123 references/advanced-topics.md:130-144 SKILL.md:25 SKILL.md:27 SKILL.md:36-81 SKILL.md:81-87 SKILL.md:87-90 SKILL.md:90-91 SKILL.md:91-92 SKILL.md:92-93 SKILL.md:93-94 SKILL.md:94-95 SKILL.md:95-96 SKILL.md:96-99 SKILL.md:99-104 SKILL.md:104-113 SKILL.md:113-114 SKILL.md:114-115 SKILL.md:115-116 SKILL.md:116-117 SKILL.md:117-120 SKILL.md:120-131 SKILL.md:131-140 SKILL.md:140-141 SKILL.md:141-142 SKILL.md:142-143 SKILL.md:143-146 SKILL.md:146-157 SKILL.md:157-160 SKILL.md:160-170 SKILL.md:170-181 SKILL.md:181-187 SKILL.md:187-190 SKILL.md:190-195 SKILL.md:195-198 SKILL.md:198-211 SKILL.md:211-219 SKILL.md:219-235 SKILL.md:235-242 SKILL.md:242-253 SKILL.md:253-256 SKILL.md:256-271 SKILL.md:271-274 SKILL.md:274-287 SKILL.md:287-293 SKILL.md:293-296 SKILL.md:296 SKILL.md:297 SKILL.md:298 SKILL.md:299

🌐 Network access (14)

references/advanced-topics.md:13 references/advanced-topics.md:14 references/advanced-topics.md:15 references/advanced-topics.md:78 references/advanced-topics.md:79 references/advanced-topics.md:80 references/advanced-topics.md:81 references/advanced-topics.md:211 references/advanced-topics.md:263 references/advanced-topics.md:264 references/advanced-topics.md:394 SKILL.md:51 SKILL.md:221 SKILL.md:222

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/cesaraugustusgrob-threejs-builder/audits/10?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/cesaraugustusgrob-threejs-builder/security.svg)](https://skillstore.io/skills/cesaraugustusgrob-threejs-builder?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/cesaraugustusgrob-threejs-builder?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/cesaraugustusgrob-threejs-builder/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/cesaraugustusgrob-threejs-builder.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

CesarAugustusGroB. (2026). threejs-builder security audit report (audit version 10) [Author version unspecified]. Skillstore. https://skillstore.io/skills/cesaraugustusgrob-threejs-builder/audits/10

BibTeX citation

@techreport{cesaraugustusgrob-cesaraugustusgrob-threejs-builder-2026,
  author = {CesarAugustusGroB},
  title = {threejs-builder security audit report (audit version 10)},
  institution = {Skillstore},
  year = {2026},
  number = {10},
  url = {https://skillstore.io/skills/cesaraugustusgrob-threejs-builder/audits/10},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "threejs-builder security audit report (audit version 10)"
version: "unspecified"
type: report
authors:
  - name: "CesarAugustusGroB"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/cesaraugustusgrob-threejs-builder/audits/10"
identifiers:
  - type: other
    value: "skillstore:cesaraugustusgrob-threejs-builder:audit:10"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: High

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Prototype a WebGL visual

Create a responsive animated scene for a product page, portfolio, or landing experience.

Build an interactive showcase

Add camera controls, lighting, materials, and motion to present an object or concept in 3D.

Teach Three.js basics

Explain scene setup, geometry, materials, animation loops, and common mistakes with concise examples.

Try These Prompts

Create a first scene

Create a responsive Three.js page with a lit animated object, simple materials, and resize handling.

Add camera controls

Build a Three.js scene with OrbitControls, balanced lighting, and smooth animation for desktop and mobile browsers.

Design a showcase

Create a Three.js product showcase with a unique geometry, polished materials, subtle motion, and performance-conscious settings.

Extend with advanced effects

Plan a Three.js scene that uses GLTF loading, post-processing, debug helpers, and clear performance tradeoffs.

Best Practices

Start with scene, camera, renderer, lighting, and resize handling before adding details.
Reuse geometries and materials when many objects share the same properties.
Test desktop and mobile rendering because WebGL performance varies by device.

Avoid

Creating new meshes, materials, or geometries inside every animation frame.
Using excessive geometry segments without a visible quality need.
Shipping CDN examples without reviewing production dependency policy.

Frequently Asked Questions

What does this skill help build?

It helps build simple Three.js web scenes with lighting, materials, animation, controls, and responsive rendering.

Does it support modern Three.js?

Yes. It focuses on ES modules and modern Three.js r150 and newer patterns.

Can it create complete production apps?

It can create solid prototypes, but production apps still need testing, bundling, accessibility review, and performance checks.

Does it include advanced 3D topics?

Yes. It includes references for GLTF models, shaders, post-processing, physics, instancing, and debugging helpers.

Can I use it with Codex and Claude Code?

Yes. The skill declares support for Claude, Codex, and Claude Code.

Does it require network access?

Some examples use unpkg CDN imports. Production projects can use npm package imports instead.

Developer Details

Author

CesarAugustusGroB

License

MIT

Skillstore revision

Version notice

The author did not declare a version.

Repository

https://github.com/CesarAugustusGroB/SHINOBI-WAY-the-inifinite-tower/tree/main/.claude/skills/threejs-builder

Ref

0519034dad657fb1f7706e0550e962beeda73fdf

Maintenance freshness

7/18/2026

Usage

11 downloads · 323 views

File structure

📁 references/

📄 advanced-topics.md

📄 SKILL.md