aura-asset-images
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides curated image URLs from Aura Assets, which utilizes Supabase (a well-known service) for asset storage. The domains used for image hosting are consistent with the skill's intended purpose of asset retrieval.
- [SAFE]: The included demo application in
demo/index.htmlimplements strong security controls, including a restrictive Content Security Policy (CSP) and iframe sandboxing to limit the execution environment and prevent unauthorized actions. - [SAFE]: Runtime dependencies such as GSAP, Tailwind CSS, and Iconify are sourced from reputable providers. The metadata in
demo/source.jsonincludes SHA256 integrity hashes for these dependencies, following industry best practices for supply chain security. - [SAFE]: The use of Base64 encoding for
encodedHtmlindemo/index.htmlis a standard packaging technique for bundling sample UI code within a static loader and does not contain malicious code, hidden instructions, or obfuscated attack vectors.
Audit Metadata