shaders
WebGPU components for React, Vue, Svelte, Solid, JS & Framer
No outside reports on file
The main risk is that shader code runs at a low level on your GPU with limited visibility, and this particular project shows limited adoption and maintenance signals, making it harder to verify safety.
Based on public adoption and transparency signals as of Oct 21, 2026. Our opinion, not a code audit or security guarantee.
What it can access
- Local filesNo local folder access notedLOW
- Command executionNo shell command runner notedLOW
- Network reachConnects to outside service APINOTED
- CredentialsNo API token requiredLOW
- Package sourceGitHub (shader-effects-inc/shaders)PUBLIC
Inferred from this listing’s public package details and description. Check the project’s source before installing.
Install
No npm or PyPI package is listed. Install from source: github.com/shader-effects-inc/shaders ↗
Everything known
We found nothing about this project in the sources we read (last checked 2026-10-30). That does not mean it has no problems.
0 incidents · 0 advisories · 0 news articles · 0 community threads · checked 2026-10-30
Popularity grade: B (from public signals such as stars and downloads, not a code review). Graded 2026-10-21.
Sources we read: OSV, GitHub Advisory Database, CISA Known Exploited Vulnerabilities, 44 security news feeds and our incident library. Last checked 2026-10-30.
About Shaders
This is a library that helps developers add visual shader effects (special graphics filters and animations) to web apps built with React, Vue, Svelte, Solid, or plain JavaScript. It appears to provide reusable components that use WebGPU, a modern graphics technology for the web.
Who it’s for
Web developers who want to add fancy visual effects like blurs, glows, or distortions to their applications. It's designed for people building interactive web experiences who are comfortable with JavaScript frameworks.
Alternatives
- Babylon.js: Popular 3D graphics library with built-in shader support and active maintenance.
- Three.js: Mature WebGL/WebGPU framework widely used for visual effects.
- Pixi.js: Lightweight 2D graphics library focused on sprite and shader effects.
- PostProcessing: Specialized library for camera post-processing effects (blur, bloom, etc.).
Setup
Check these steps against the project’s own instructions before running anything.
Follow the project's README on GitHub for installation and usage instructions specific to your framework.
Why this grade
Signal-based grade (4/7 points): very widely starred on GitHub, public source code. This reflects adoption and transparency, not a code review.
Popularity and upkeep
- GitHub stars
- 5.7k
- Listing last refreshed
- 2026-10-29
These are public popularity signals, not a maintenance check. Look at the repository’s commit history and open issues.
Risks to watch for
- Graphics processing access: The library uses WebGPU to access your device's GPU directly, which could theoretically be exploited to leak GPU memory or identify your hardware.
- Obfuscated effects: Complex shader code could hide malicious operations (like pixel-by-pixel data extraction) that are hard to spot without deep graphics knowledge.
- Third-party dependencies: The library likely depends on other packages; vulnerabilities in those could affect your app.
- No activity signals: Zero npm downloads and no recent Hacker News discussion suggest this project may be unmaintained or not widely used, reducing community security reviews.
- Arbitrary code in shaders: If shader code comes from untrusted sources, it could perform unauthorized GPU operations or exfiltrate visual data.
How to lower the risk
Least-privilege permissions
- Only use shaders from sources you trust completely.
- Audit shader code before adding it to your app.
Network isolation
- Run this library only in frontend environments where you control the code.
- Never load shader definitions from user input or external APIs.
Monitoring
- Check GitHub for security issues or updates before using.
- Watch for unusual GPU usage spikes when effects run.
Red flags to watch for
- Shader code you didn't write or can't read.
- No recent commits or responses to security issues.
- Requests to send visual data to external servers.
Questions
How do I install Shaders?
Shaders does not publish a standalone npm or PyPI package. Clone or follow the setup instructions in its source repository at github.com/shader-effects-inc/shaders.
Are there security reports about Shaders?
No reports found for this package in our research (last checked 2026-10-30). Shaders currently holds Grade B (Some risk signals) based on public adoption and transparency signals. Key risk areas to watch include graphics processing access, obfuscated effects, third-party dependencies.
Is Shaders actively maintained?
Shaders has 5.7k GitHub stars. Our directory data was last refreshed on 2026-10-29. Check recent commit activity, release tags, and open issues at github.com/shader-effects-inc/shaders before pinning it in production.
What are alternatives to Shaders?
Notable alternatives to Shaders include Babylon.js (Popular 3D graphics library with built-in shader support and active maintenance), Three.js (Mature WebGL/WebGPU framework widely used for visual effects), Pixi.js (Lightweight 2D graphics library focused on sprite and shader effects), PostProcessing (Specialized library for camera post-processing effects (blur, bloom, etc.)). You can also compare Shaders side by side with other MCP servers in the Related tools section on this page.
README badge and team notes
Maintain or use Shaders? Show its live grade in your GitHub README, docs site, or run a check from the terminal before you install.
GitHub README Markdown:
[](https://agentarmorhq.com/skills/shader-effects-inc-shaders)HTML embed:
<a href="https://agentarmorhq.com/skills/shader-effects-inc-shaders"><img src="https://agentarmorhq.com/api/badge/shader-effects-inc-shaders" alt="AgentArmorHQ Risk Grade for Shaders" height="20" /></a>Terminal check:
curl -fsSL https://agentarmorhq.com/api/cli | node --input-type=module - check "shader-effects-inc-shaders"Share with your security lead
Need sign-off to use shaders? Copy this note for Slack, a ticket or a pull request.
### AgentArmorHQ Security Review Memo: shaders
- **Listing URL:** https://agentarmorhq.com/skills/shader-effects-inc-shaders
- **Type:** App connector
- **Risk Grade:** Grade B (Some risk signals)
- **Outside Security Advisories on File:** 0
- **Public Adoption:** 5.7k GitHub stars
#### Permission & Blast-Radius Signals
- **Local files:** No local folder access noted
- **Command execution:** No shell command runner noted
- **Network reach:** Connects to outside service API
- **Credentials:** No API token required
- **Package source:** GitHub (shader-effects-inc/shaders)
#### Recommended Hardened Setup
- **Source Repo:** https://github.com/shader-effects-inc/shaders
- **Controls:** Pin an exact version in `.mcp.json`, scope access to a single workspace folder, and use a least-privilege read-only token where supported.
_Based on public adoption and transparency signals as of Oct 21, 2026. Our opinion, not a code audit or security guarantee._Key facts
- Type
- App connector
- Publisher
- shader-effects-inc
- Source code
- github.com/shader-effects-inc/shaders
- Est. context load
- ~850 tokens / turn (~5 tool schemas, 0.43% of 200k context)
- Popularity
- 5.7k GitHub stars
- Last updated
- 2026-10-29
- Last graded
- 2026-10-21
Community
Discussions for Shaders
Ask questions or share configuration tips. Governed by our Community Rules & Terms.
No posts match this filter yet.
Be the first to ask a question or share a working tip.
Check before you install, in Claude
Your assistant answers Block, Review or No known issues for any package before it installs it.
Get this check inside Claude