gsap-scrolltrigger-storytelling
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONOBFUSCATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches design assets from Supabase (wypspaektjjiccarxrgy.supabase.co) and references official runtime libraries for GSAP, Tailwind CSS, and Iconify from well-known content delivery networks (Cloudflare, Iconify). These are standard resources for modern web development.
- [DYNAMIC_EXECUTION]: The demo loader in demo/index.html dynamically renders bundled content via an iframe srcdoc. This execution is restricted by a strict Content Security Policy (CSP) and iframe sandboxing to prevent unauthorized network or script behavior.
- [OBFUSCATION]: A Base64-encoded HTML document is used to bundle the demo within the loader file. Manual decoding confirms it contains legitimate design and animation code with no hidden malicious instructions.
Audit Metadata