css-border-gradient
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEOBFUSCATIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [OBFUSCATION]: The file
demo/index.htmlcontains a large Base64 encoded HTML document assigned to theencodedHtmlvariable. This is used as a technical mechanism to serve a sandboxed design demo via thesrcdocattribute of an iframe and does not contain malicious instructions. - [EXTERNAL_DOWNLOADS]: The demo fetches image assets from Supabase (
hoirqrkdgbmvpwutwuwj.supabase.co) and runtime libraries from well-known services including Cloudflare's CDN (cdnjs.cloudflare.com), Tailwind CSS (cdn.tailwindcss.com), and Iconify (code.iconify.design). These are standard, well-known providers for web development resources. - [INDIRECT_PROMPT_INJECTION]: The
demo/PROMPT.mdfile contains instructions for the agent to replicate a design from an external URL (neuform.ai). While this constitutes an ingestion of untrusted external content, it is limited to the skill's primary purpose of design recreation and does not grant the skill elevated privileges.
Audit Metadata