webgl-laser

Warn

Audited by Gen Agent Trust Hub on Oct 14, 2026

Risk Level: MEDIUMOBFUSCATIONDYNAMIC_EXECUTION
Full Analysis
  • [OBFUSCATION]: The file demo/index.html contains a large Base64 encoded string (encodedHtml) that stores the entire source code for a demo landing page, including HTML structure and JavaScript logic. This technique hides the executable content from plain-text security scanners.
  • [DYNAMIC_EXECUTION]: The script in demo/index.html dynamically decodes the Base64 string at runtime and assigns the result to an iframe's srcdoc attribute. This method of dynamic content injection bypasses standard static analysis of the demo's interactive behaviors.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 14, 2026, 02:44 PM