webgl-3d-object
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions and code samples follow standard industry practices for 3D web development. No malicious patterns, prompt injections, or unauthorized data access attempts were detected.
- [OBFUSCATION]: The file
demo/index.htmlcontains a large Base64-encoded string (encodedHtml) used to deliver the demo's HTML content. Analysis of the decoded payload confirms it is a benign landing page implementation using GSAP and Tailwind CSS. The use of encoding here is a platform-standard method for demo delivery. - [EXTERNAL_DOWNLOADS]: The demo components reference runtime scripts and assets from well-known and reputable services, including Cloudflare's CDN (for GSAP and ScrollTrigger), Google Fonts, and Supabase. These connections are intended for legitimate asset loading and are restricted by the implemented Content Security Policy.
- [DATA_EXPOSURE]: The implementation uses a secure communication pattern (
postMessage) to pass assets to a sandboxed iframe. This setup includes origin verification and a restrictive CSP to prevent cross-site scripting and unauthorized data exfiltration.
Audit Metadata