blue-cloudy-clean-modern
Pass
Audited by Gen Agent Trust Hub on Nov 10, 2026
Risk Level: SAFEOBFUSCATIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [OBFUSCATION]: The file
demo/index.htmluses a Base64-encoded string (encodedHtml) to store the HTML and JavaScript for the demo interface. This is part of the vendor's standard sandboxing mechanism and does not hide malicious intent. - [DYNAMIC_EXECUTION]: The demo runtime decodes the embedded content and executes it within an iframe using the
srcdocattribute. This is restricted by a strict Content Security Policy (CSP) and anallow-scriptssandbox. - [EXTERNAL_DOWNLOADS]: The demo references external assets from well-known and trusted typography providers, specifically Google Fonts (
fonts.googleapis.com,fonts.gstatic.com) and Fontshare (api.fontshare.com).
Audit Metadata