skeuomorphic-ui

Pass

Audited by Gen Agent Trust Hub on Oct 14, 2026

Risk Level: SAFEOBFUSCATIONEXTERNAL_DOWNLOADS
Full Analysis
  • [OBFUSCATION]: The file demo/index.html contains a large Base64 encoded string (encodedHtml) used to store the template for the sandboxed demo. This is decoded at runtime via atob() and loaded into a sandboxed iframe using srcdoc. While Base64 is a form of encoding, its use here is for bundling the demo payload into a single file rather than malicious concealment.
  • [EXTERNAL_DOWNLOADS]: The skill's demo fetches configuration and runtime scripts from well-known content delivery networks including fonts.googleapis.com, cdnjs.cloudflare.com (GSAP), and code.iconify.design. These are industry-standard services for web development assets.
  • [SAFE]: The core skill instructions in SKILL.md consist entirely of CSS styling rules, gradient recipes, and design principles. No dangerous commands, shell executions, or sensitive data access patterns were detected.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 14, 2026, 02:36 PM