progressive-blur
Warn
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: MEDIUMOBFUSCATIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [OBFUSCATION]: The file
demo/index.htmlcontains a large Base64-encoded string (encodedHtml) that hides the entire source code of the demo document, including inline scripts and styles. - [DYNAMIC_EXECUTION]: The skill dynamically assembles and executes code at runtime. It decodes the Base64 HTML payload and injects it into an iframe using the
srcdocattribute. Furthermore, a bootstrap script inside the demo usesURL.createObjectURLto dynamically load media assets into the document context. - [EXTERNAL_DOWNLOADS]: The demo fetches dependencies and resources from several well-known services and CDNs. It downloads runtime libraries from
cdnjs.cloudflare.com(GSAP),cdn.tailwindcss.com, andcode.iconify.design. It also retrieves media assets from Supabase (hoirqrkdgbmvpwutwuwj.supabase.co) and font resources from Google Fonts and Fontshare.
Audit Metadata