paper-cutout

The code appears to be a browser-based animation renderer. The string-to-`eval` path in `renderSheet` is a significant code-injection risk if `at` can contain untrusted values. No direct evidence of data theft, external communication, or other malware appears in the provided fragment.