shader
v1.0.0Write, explain, adapt, and debug practical shader code for GLSL, WebGL, Three.js ShaderMaterial, React Three Fiber, postprocess-style full-screen effects, an...
⭐ 1· 207·0 current·0 all-time
by@jvy
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (shader authoring, porting, debugging) match the included assets and scripts: CLI helper (scripts/shader.js), multiple demo templates, snippets, and references. There are no unrelated credentials, binaries, or configuration paths requested.
Instruction Scope
SKILL.md instructs the agent to use the bundled CLI and templates and to produce/port/debug shader code. The provided scripts and demo HTML implement only shader-related tasks and reference only local bundled assets; there are no instructions to read unrelated host files or exfiltrate data.
Install Mechanism
No install spec is present (lowest-risk). Demo HTML imports Three.js from an external CDN (unpkg) at runtime in the browser—this is expected for web demos but means the demos fetch an external library when opened. There are also package.json/dev files for the R3F demo (for local npm/vite usage) but no automatic installer included.
Credentials
The skill declares no required environment variables, credentials, or config paths. The code does not attempt to access secrets. The only external dependence is the browser demo loading Three.js from a CDN, which is normal for demos but unrelated to credentials.
Persistence & Privilege
The skill policy (agents/openai.yaml) sets allow_implicit_invocation: true which permits implicit/autonomous invocation by the agent platform—this is a standard setting and not equivalent to always: true. There is no install step that persists code into the system beyond the usual skill files.
Assessment
This skill appears coherent and focused on shader development. Things to consider before running: (1) Opening the demo HTML in a browser will fetch Three.js from unpkg (a public CDN) — if you prefer no remote fetch, replace the CDN import with a local copy. (2) The included node CLI (scripts/shader.js) operates on the bundled assets and does not require credentials; you can inspect the script before running. (3) If you are concerned about the agent invoking the skill autonomously, note the skill allows implicit invocation by policy — you can disable or restrict that in your agent settings if desired. Overall, no environment variables or secret access are requested and the files match the declared purpose.Like a lobster shell, security has layers — review code before you run it.
latestvk976pshtxaf4w2x5qdzt3wwbrs83a7f0
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🟦 Clawdis