html-demo
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a robust framework for HTML-based UI animations. Analysis of the scripts and instructions reveals legitimate development workflows including automated screenshot verification and localized previewing.
- [COMMAND_EXECUTION]: The skill includes a utility script
scripts/shoot.mjsthat uses Playwright to capture screenshots of the rendered demos for verification purposes. This is an expected and documented part of the development cycle. - [EXTERNAL_DOWNLOADS]: The skill references and downloads fonts from Google's well-known and trusted infrastructure (fonts.googleapis.com) to ensure consistent UI rendering.
- [DYNAMIC_EXECUTION]: The demo engine in
scripts/step-window.jsusesinnerHTMLto inject the generated UI markup for each step. This is consistent with its purpose as a rendering engine for UI prototypes and involves local code generation rather than untrusted remote data.
Audit Metadata