nested-container-clean-agency

Warn

Audited by Gen Agent Trust Hub on Oct 14, 2026

Risk Level: MEDIUMOBFUSCATIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [OBFUSCATION]: The file demo/index.html contains a significant amount of Base64-encoded content within the encodedHtml variable. This content decodes to a complete HTML document including complex WebGL shaders, styles, and logic. This approach conceals the demo's source code from standard text-based reviews.
  • [DYNAMIC_EXECUTION]: The skill employs dynamic loading techniques by programmatically setting the srcdoc of a sandboxed iframe using the decoded Base64 content. The resulting document includes inline scripts that handle asset replacement and animation.
  • [EXTERNAL_DOWNLOADS]: The demo relies on external resources from established third-party services. It fetches fonts from Google Fonts and Fontshare, and includes runtime libraries from Tailwind CSS and Iconify to render the visual components correctly.
  • [SAFE]: The core logic in SKILL.md consists of purely instructional design guidelines. It does not contain any executable commands, script calls, or instructions that would cause the agent to perform dangerous operations on the local system.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 14, 2026, 02:39 PM