Skip to content
Back to skills

Ztg Mrdoob Three Js

DSecurity

Consult and safely integrate mrdoob/three.js for Three.js engine and examples. Preserve RTL, responsive accessibility, dependency and license controls.

  • 14 stars
  • 0 votes
  • 0 copies
  • 0 views
  • Added November 7, 2026
designbashreacttestinggit

Works with

  • mcp

Security analysis

D42/100
  • criticalPipes output to a shell interpreter
  • criticalDownloads and executes remote scripts — classic supply chain attack
  • mediumInstalls packages at runtime which could introduce malicious dependencies

Pro shows the line behind each finding and how to fix it

Scanned November 7, 2026

npx -y skills add Realjustawall/Perfect-AI --skill ztg-mrdoob-three-js --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Ztg Mrdoob Three Js?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Ztg Mrdoob Three Js
[![Security: D — Skills Directory](https://www.skillsdirectory.com/api/skills/realjustawall-ztg-mrdoob-three-js/badge)](https://www.skillsdirectory.com/skills/realjustawall-ztg-mrdoob-three-js)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: ztg-mrdoob-three-js
description: Consult and safely integrate mrdoob/three.js for Three.js engine and examples. Preserve RTL, responsive accessibility, dependency and license controls.
---

# GitHub research guide: mrdoob/three.js

**Origin:** https://github.com/mrdoob/three.js  
**Expected value:** Three.js engine and examples.  
**Rights flag:** MIT. Do not treat this as license verification for a particular file or release.

## How to use this upstream project without MCP

1. Inspect the actual task and determine whether `three.js` supplies a feature not already present in the Perfect_AI pack. Do not import a whole GitHub repository merely to satisfy a trend.
2. Check the original repo's README, release history, LICENSE, install guide and installed dependency versions at the time of work.
3. Read the upstream implementation and extract only the necessary design principle or, with license compliance, the needed source component.
4. Prefer official registry or npm install commands over arbitrary `curl | bash` scripts. Preserve project lockfiles, make changes in a branch, review generated diffs and dependencies.
5. Adapt design to real UI contexts: 320px container, desktop, RTL Persian, LTR English, reduced motion, input from touch and keyboard, true page content and honest metrics.
6. Ensure observable behavior is tested in an actual browser. Document what was implemented and which upstream source was only consulted.

## Integration brief

- Desired value: **Three.js engine and examples**.
- Fallback: semantic HTML with CSS; no JS-only critical UI.
- Style: honor user color and typography brief, specifically strict monochrome on Perfect_AI.
- Animation owners: never let two libraries animate the same `transform` independently.
- Accessibility: keyboard actions, readable text, visible focus, correct labels, and state-independent semantics.
- Cleanup: remove event handlers, dispose GPU assets, stop animations on unmount, handle React Strict Mode.

## Required acceptance

- [ ] Source inspected; exact upstream revision identified.
- [ ] License and any non-MIT restrictions considered.
- [ ] Only task-relevant portions integrated and attribution preserved as needed.
- [ ] Independent compile/build and browser QA completed.
- [ ] No MCP, no remote execution without human review.
- [ ] Report source and changed files, actual testing evidence and open risks.

**Classification:** locally authored integration guidance, **not** a vendored original GitHub skill or codebase.

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.