bjornmelin/web-three-r3f
plugins/web-motion/skills/web-three-r3f/SKILL.md
Use this skill for Three.js, React Three Fiber, Drei, Canvas/createRoot lifecycle, loaders, GLTF, useFrame, disposal, SSR/client boundaries, DPR, and browser proof. Trigger on Three.js, THREE, @react-three/fiber, @react-three/drei, R3F Canvas, useFrame, GLTF, WebGLRenderer. Do not use for near-miss tasks outside these boundaries; route to adjacent motion or platform skills when they own the implementation.
$ install --global
skillsauthnpx skillsauth add bjornmelin/dev-skills web-three-r3fInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jun 11, 2026, 3:41 AM49.2s23 files scanned
SKILL.md
- name:
- web-three-r3f
- description:
- >-
- license:
- MIT
Web Three R3F
Three.js, React Three Fiber, Drei, Canvas/createRoot lifecycle, loaders, GLTF, useFrame, disposal, SSR/client boundaries, DPR, and browser proof.
Operating Contract
Use this skill as a compact router plus domain checklist. Load references only when the current task matches their condition. Do not cite local scrape paths, machine cache paths, or hidden source locations. Verify API details against the target repo's installed package versions before editing.
Source Order
- Inspect the target repo's installed packages, framework/runtime versions, local design tokens, accessibility policy, and existing motion patterns.
- Use the bundled references below for skill-specific gotchas and copied source excerpts.
- Use official current docs/package source as API truth when local code or bundled notes are version-sensitive.
Decision Boundaries
- Use typegpu for typed WebGPU pipelines.
- Use native-three-r3f for Expo/React Native.
- Use CSS 3D transforms only for simple DOM transforms.
Workflow
- Inspect Three/R3F/Drei/React versions and asset pipeline.
- Choose Canvas/R3F or plain Three renderer based on local ownership.
- Reserve stable layout, DPR, fallback, and reduced-motion behavior.
- Verify nonblank pixels, resize, interaction, asset errors, and cleanup.
Gotchas
- Undefined parent height causes blank canvases.
- React state inside useFrame causes frame-loop reconciliation.
- R3F auto-disposal does not cover every primitive or externally created object.
Bundled Resources
references/r3f-scene-lifecycle.md- Canvas/createRoot and scene lifecycle. Read for Canvas props, custom root ownership, SSR/client boundaries, and resize.references/asset-loaders-and-fallbacks.md- GLTF/texture loaders and fallbacks. Read for useGLTF/useTexture, Suspense, decoder paths, and asset errors.references/three-disposal-performance.md- Three.js disposal and performance guide. Read for renderer cleanup, render targets, materials, textures, DPR, frameloop, and profiling.references/interaction-and-event-boundaries.md- R3F interaction and event boundaries. Read when a Three/R3F scene handles pointer, keyboard, scroll, controls, raycasting, or HTML overlays.references/asset-pipeline-compression.md- 3D asset pipeline, compression, and loader policy. Read when loading GLTF/GLB, textures, Draco/Meshopt/KTX2 assets, or remote 3D content.references/docs-drei-gltf-use-gltf.md- Copied source excerpt. Load only when exact upstream wording or API detail is needed.references/docs-r3f-canvas.md- Copied source excerpt. Load only when exact upstream wording or API detail is needed.references/docs-r3f-pitfalls.md- Copied source excerpt. Load only when exact upstream wording or API detail is needed.references/docs-r3f-scaling-performance.md- Copied source excerpt. Load only when exact upstream wording or API detail is needed.references/docs-three-disposal.md- Copied source excerpt. Load only when exact upstream wording or API detail is needed.references/docs-r3f-introduction.md- Copied source excerpt. Load only when exact upstream wording or API detail is needed.references/docs-three-creating-a-scene.md- Copied source excerpt. Load only when exact upstream wording or API detail is needed.references/r3f-field-guide.md- Copied source excerpt. Load only when exact upstream wording or API detail is needed.references/index.md- Complete reference inventory and routing summary.references/source-ledger.md- Source list, checked date, and copy policy.references/provenance.json- Machine-readable source and local-resource metadata.scripts/audit.mjs- Self-contained audit CLI; rundoctorbeforescanwhen setup is unclear.assets/templates/web-three-r3f-audit-report.md- Audit response/report template.assets/templates/web-three-r3f-review-checklist.md- Manual review checklist.assets/examples/web-three-r3f-starter.tsx- Starter fixture/example for this skill.evals/trigger-queries.json- Trigger/near-miss eval set for description tuning.evals/evals.json- Task-quality evals with assertions.
Audit CLI
node scripts/audit.mjs doctor --root . --format json
node scripts/audit.mjs scan --root . --format markdown
node scripts/audit.mjs scan --root . --format json --output web-three-r3f-audit.json
Treat script findings as leads. Verify every finding against current code before changing behavior or reporting it as valid.
Closeout
Before finalizing, run the repo's focused validation command, this skill's audit CLI when relevant, and any browser/device/manual proof required by the changed surface. Report commands run, findings fixed, findings skipped with reasons, and residual risk.
Related Skills
bjornmelin/repo-modernizer
development
VerifiedTrustedCommunity
Repo/monorepo modernization: dependency upgrades, security fixes, deprecation cleanup, framework migrations, dependency-native refactors, and verified hard-cut simplification.
2SKILL.mdUpdated Jun 11, 2026
bjornmelin/web-waapi
development
VerifiedTrustedCommunity
Use this skill for Browser Web Animations API: Element.animate(), Animation, KeyframeEffect, playback control, generated keyframes, cancel/finish, commitStyles, and cleanup. Trigger on Element.animate, WAAPI, Web Animations API, KeyframeEffect, Animation object, commitStyles. Do not use for near-miss tasks outside these boundaries; route to adjacent motion or platform skills when they own the implementation.
2SKILL.mdUpdated Jun 11, 2026
bjornmelin/web-tailwind-motion
development
VerifiedTrustedCommunity
Use this skill for Tailwind CSS v4 transition, animation, duration, easing, motion-safe/motion-reduce, @theme motion tokens, and static class safety. Trigger on Tailwind animation, transition-all, motion-safe, motion-reduce, @theme, animate-, duration-. Do not use for near-miss tasks outside these boundaries; route to adjacent motion or platform skills when they own the implementation.
2SKILL.mdUpdated Jun 11, 2026
bjornmelin/web-rive
development
VerifiedTrustedCommunity
Use this skill for Rive web and React runtime integration, .riv assets, state machines, inputs, lifecycle cleanup, accessibility, remote asset security, and fallback behavior. Trigger on Rive, .riv, state machine input, @rive-app/react-webgl2, @rive-app/webgl2, @rive-app/react-canvas, @rive-app/canvas, Rive web. Do not use for near-miss tasks outside these boundaries; route to adjacent motion or platform skills when they own the implementation.
2SKILL.mdUpdated Jun 11, 2026