nested-container-frames
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEOBFUSCATIONEXTERNAL_DOWNLOADS
Full Analysis
- [OBFUSCATION]: The file demo/index.html contains a large Base64-encoded string ('encodedHtml') that stores the full HTML content of the sandboxed design demo. This is a common packaging technique for design previews to ensure they are self-contained and can be loaded into a sandboxed iframe using srcdoc.
- [EXTERNAL_DOWNLOADS]: The demo environment references runtime scripts and visual assets from well-known technology providers including Google Fonts, Tailwind CSS, and Iconify. It also retrieves image assets from a Supabase storage instance, as specified in the metadata. These downloads are standard for web design development and originate from established sources.
Audit Metadata