blur
Fail
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The script
assets/blur.jsimports a functional helper module (useThree) directly from a third-party personal account athttps://codepen.io/soju22/pen/cb31020fed766eb66bc8ad1879bc3325.js. Because this script is executed at runtime and is not hosted on a trusted organizational repository, it represents an unverified remote code execution vector. - [EXTERNAL_DOWNLOADS]: The skill references multiple external assets, including image files hosted on
assets.codepen.ioand the Three.js library from theunpkg.comCDN. While these are used for the skill's visual functionality, they introduce dependencies on external infrastructure that is not controlled by the skill author.
Recommendations
- AI detected serious security threats
Audit Metadata