iso-glow
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill's HTML templates reference the Three.js library and Google Fonts. These resources are loaded from well-known services (cdn.jsdelivr.net and fonts.googleapis.com) and are considered safe dependencies for the skill's visualization functionality.
- [COMMAND_EXECUTION]: The skill provides a Python-based assembly command that performs string replacements to merge user-generated figure code into the provided HTML templates. This script operates locally on the skill's own assets and the files created by the agent.
- [DYNAMIC_EXECUTION]: The skill generates interactive JavaScript code that is executed in the user's browser to render SVG and 3D graphics. This is a core part of the skill's design and does not involve the execution of untrusted external code.
Audit Metadata