number-details
Warn
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: MEDIUMOBFUSCATIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [OBFUSCATION]: The file demo/index.html contains a large Base64-encoded string (encodedHtml) that stores the full HTML and JavaScript source for a design demo, concealing the code from plain-text inspection.
- [DYNAMIC_EXECUTION]: The demo implementation in demo/index.html uses the srcdoc attribute of an iframe to dynamically inject and execute the decoded content at runtime.
- [EXTERNAL_DOWNLOADS]: The skill fetches runtime design libraries, including GSAP, Three.js, and Iconify, from well-known and trusted CDNs as specified in demo/source.json.
Audit Metadata