cobejs
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the
cobeNPM package and its official source code on GitHub (github.com/shuding/cobe). These are well-known resources in the web development ecosystem and are used as intended for decorative UI components. - [COMMAND_EXECUTION]: The provided code snippets and demo implementation exclusively use standard browser APIs (Canvas 2D API, RequestAnimationFrame) and do not involve shell command execution or system-level access.
- [DATA_EXFILTRATION]: There are no network operations, API calls, or data transmission patterns detected in the skill instructions or the demo HTML file.
- [OBFUSCATION]: The JavaScript within
demo/index.htmlis written in a compact style typical for standalone demos, but it remains fully legible and contains no hidden payloads, zero-width characters, or encoded strings.
Audit Metadata