dither-background
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEOBFUSCATIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [OBFUSCATION]: The file demo/index.html contains a large Base64-encoded string (encodedHtml) that decodes to a full HTML document including inline scripts for animations and WebGL. Analysis of the decoded content confirms it is benign and used for demo presentation.
- [INDIRECT_PROMPT_INJECTION]: The skill acts as a template for generating UI components, creating a surface for indirect prompt injection. 1. Ingestion points: User instructions in demo/PROMPT.md. 2. Boundary markers: Absent. 3. Capability inventory: Canvas and WebGL rendering in SKILL.md and demo/index.html. 4. Sanitization: Absent.
- [EXTERNAL_DOWNLOADS]: The demo loads assets from well-known services including Google Fonts, Fontshare, and Tailwind CSS. These are documented as safe references to established providers.
Audit Metadata