skills/mengto/skills/progressive-blur/Gen Agent Trust Hub

progressive-blur

Warn

Audited by Gen Agent Trust Hub on Oct 23, 2026

Risk Level: MEDIUMOBFUSCATIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [OBFUSCATION]: The file demo/index.html contains a large Base64-encoded string (encodedHtml) that hides the entire source code of the demo document, including inline scripts and styles.
  • [DYNAMIC_EXECUTION]: The skill dynamically assembles and executes code at runtime. It decodes the Base64 HTML payload and injects it into an iframe using the srcdoc attribute. Furthermore, a bootstrap script inside the demo uses URL.createObjectURL to dynamically load media assets into the document context.
  • [EXTERNAL_DOWNLOADS]: The demo fetches dependencies and resources from several well-known services and CDNs. It downloads runtime libraries from cdnjs.cloudflare.com (GSAP), cdn.tailwindcss.com, and code.iconify.design. It also retrieves media assets from Supabase (hoirqrkdgbmvpwutwuwj.supabase.co) and font resources from Google Fonts and Fontshare.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 23, 2026, 02:11 AM