aura-asset-images

Pass

Audited by Gen Agent Trust Hub on Aug 26, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides curated image URLs from Aura Assets, which utilizes Supabase (a well-known service) for asset storage. The domains used for image hosting are consistent with the skill's intended purpose of asset retrieval.
  • [SAFE]: The included demo application in demo/index.html implements strong security controls, including a restrictive Content Security Policy (CSP) and iframe sandboxing to limit the execution environment and prevent unauthorized actions.
  • [SAFE]: Runtime dependencies such as GSAP, Tailwind CSS, and Iconify are sourced from reputable providers. The metadata in demo/source.json includes SHA256 integrity hashes for these dependencies, following industry best practices for supply chain security.
  • [SAFE]: The use of Base64 encoding for encodedHtml in demo/index.html is a standard packaging technique for bundling sample UI code within a static loader and does not contain malicious code, hidden instructions, or obfuscated attack vectors.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 26, 2026, 01:37 PM
Security Audit — agent-trust-hub — aura-asset-images