light-mode-paper-technical
Warn
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: MEDIUMOBFUSCATIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [OBFUSCATION]: The
demo/index.htmlfile contains a large Base64-encoded string (encodedHtml) which decodes to the complete HTML, CSS, and JavaScript for the demo. This practice hides the implementation details from static analysis tools. - [DYNAMIC_EXECUTION]: Within the decoded demo HTML, JavaScript dynamically compiles WebGL vertex and fragment shaders from string literals using
gl.compileShader. This is a form of runtime code generation and execution. - [EXTERNAL_DOWNLOADS]: The skill and its demo reference external assets from well-known services, including Google Fonts (
fonts.googleapis.com,fonts.gstatic.com), Fontshare (api.fontshare.com), and icon libraries via a bundled runtime script originally sourced from the Iconify CDN.
Audit Metadata