editorial-tech

Warn

Audited by Gen Agent Trust Hub on Oct 14, 2026

Risk Level: MEDIUMOBFUSCATIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [OBFUSCATION]: The file demo/index.html includes a large Base64 encoded string assigned to encodedHtml which contains the full source code for the demonstration page, including HTML and JavaScript.
  • [DYNAMIC_EXECUTION]: The demo loader script in demo/index.html decodes the encodedHtml content at runtime and injects it into a sandboxed iframe using the srcdoc attribute, leading to the execution of the encoded content.
  • [EXTERNAL_DOWNLOADS]: The skill's demo metadata and decoded content reference runtime dependencies from well-known services including Cloudflare (cdnjs.cloudflare.com), Tailwind Labs (cdn.tailwindcss.com), and Iconify. These are recognized as standard, safe resources for web development.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 14, 2026, 02:33 PM