aura-asset-images
Pass
Audited by Gen Agent Trust Hub on Aug 16, 2026
Risk Level: SAFE
Full Analysis
- [OBFUSCATION]: The file
demo/index.htmluses Base64 encoding to bundle the HTML content of its design demo. This is a common packaging technique used for self-contained previews and does not hide malicious functionality. - [DYNAMIC_EXECUTION]: The demo environment utilizes
srcdocandURL.createObjectURLwithindemo/index.htmlto dynamically load and display assets inside a sandboxed iframe. This execution is confined to the browser's sandbox. - [UNVERIFIABLE_DEPENDENCIES_AND_REMOTE_CODE_EXECUTION]: The skill and its demo fetch image assets and runtime libraries from well-known and established service providers, including Cloudflare (GSAP), Iconify, and Google Fonts.
Audit Metadata