solar-duotone-bold
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEOBFUSCATIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [OBFUSCATION]: The file
demo/index.htmlcontains a large Base64-encoded string representing the inner HTML of a sandboxed design demo. This technique is used here to bundle a sub-document for demonstration purposes. - [DYNAMIC_EXECUTION]: The skill employs dynamic execution patterns by populating an iframe's
srcdocattribute with the decoded demo HTML and using thepostMessageAPI to inject asset data into the sandboxed environment at runtime. - [EXTERNAL_DOWNLOADS]: The demo environment references external scripts and styles from well-known technology providers and CDNs, including Tailwind CSS (
cdn.tailwindcss.com), Iconify (code.iconify.design), and Google Fonts. These are standard resources for UI development and do not represent a security risk in this context.
Audit Metadata