mesh-gradient-dark-blue-clean
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEOBFUSCATIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill's instructions and code are focused entirely on UI design and visual rendering. No malicious patterns, such as credential harvesting or unauthorized command execution, were found.
- [OBFUSCATION]: The
demo/index.htmlfile includes a large Base64-encoded string representing the HTML source of a sandboxed demo. This is a standard isolation technique used by the Neuform platform to provide safe previews and does not conceal malicious functionality. - [EXTERNAL_DOWNLOADS]: The demo configuration references assets from well-known and trusted services, including Google Fonts, Tailwind CSS, and Iconify. These are used appropriately for visual styling and do not represent a security concern.
- [INDIRECT_PROMPT_INJECTION]: The
demo/PROMPT.mdfile contains instructions that reference external design URLs as visual guides. Although this is a data ingestion surface, the skill lacks any powerful tools or capabilities (like file system writes or shell access) that would make such an injection exploitable.
Audit Metadata