skeuomorphic-ui
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEOBFUSCATIONEXTERNAL_DOWNLOADS
Full Analysis
- [OBFUSCATION]: The file
demo/index.htmlcontains a large Base64 encoded string (encodedHtml) used to store the template for the sandboxed demo. This is decoded at runtime viaatob()and loaded into a sandboxed iframe usingsrcdoc. While Base64 is a form of encoding, its use here is for bundling the demo payload into a single file rather than malicious concealment. - [EXTERNAL_DOWNLOADS]: The skill's demo fetches configuration and runtime scripts from well-known content delivery networks including
fonts.googleapis.com,cdnjs.cloudflare.com(GSAP), andcode.iconify.design. These are industry-standard services for web development assets. - [SAFE]: The core skill instructions in
SKILL.mdconsist entirely of CSS styling rules, gradient recipes, and design principles. No dangerous commands, shell executions, or sensitive data access patterns were detected.
Audit Metadata