light-mode-paper-technical

Fail

Audited by Gen Agent Trust Hub on Oct 14, 2026

Risk Level: HIGHOBFUSCATIONEXTERNAL_DOWNLOADS
Full Analysis
  • [OBFUSCATION]: The file demo/index.html contains a large Base64 encoded string in the encodedHtml variable. This string decodes to a complete HTML document which is then dynamically injected into an iframe using the srcdoc attribute. This practice obscures the underlying code from direct inspection.
  • [EXTERNAL_DOWNLOADS]: The skill downloads and utilizes external resources from several well-known technology services.
  • Fetches font assets and CSS stylesheets from Google Fonts and Fontshare.
  • Loads the Tailwind CSS runtime library from its official CDN to process styles at runtime.
  • Downloads icon components from the Iconify CDN.
  • Fetches design assets (images) from a storage bucket hosted on Supabase.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Oct 14, 2026, 02:34 PM