gsap

Pass

Audited by Gen Agent Trust Hub on Oct 14, 2026

Risk Level: SAFEOBFUSCATIONEXTERNAL_DOWNLOADS
Full Analysis
  • [OBFUSCATION]: The file demo/index.html contains a large Base64-encoded string representing the inner HTML of the design demo. This is a standard method for packaging standalone, sandboxed demos and decodes to legitimate HTML, CSS, and GSAP animation code.
  • [EXTERNAL_DOWNLOADS]: The skill references and fetches assets from well-known and trusted services, including Cloudflare's CDN (cdnjs.cloudflare.com), Google Fonts (fonts.googleapis.com), and Supabase. These downloads are limited to public runtime libraries and static assets required for the UI demonstration and do not include sensitive data operations.
  • [COMMAND_EXECUTION]: The skill provides code snippets for UI animations but does not instruct the agent to execute shell commands, modify the system environment, or perform privileged operations.
  • [SAFE]: The implementation uses a sandboxed iframe with a restrictive Content Security Policy (CSP) to render the demo content, ensuring that the execution environment for the dynamic animation scripts is isolated.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 14, 2026, 02:35 PM