background-grid-webgl

Pass

Audited by Gen Agent Trust Hub on Aug 26, 2026

Risk Level: SAFE
Full Analysis
  • [OBFUSCATION]: The demo/index.html file includes a large Base64-encoded string (encodedHtml) containing the HTML, CSS, and JavaScript for the demo page. This content is decoded at runtime and injected into a sandboxed iframe using the srcdoc attribute to ensure a controlled environment for the visual components.
  • [DYNAMIC_EXECUTION]: The demo's WebGL implementation utilizes gl.compileShader to compile vertex and fragment shaders from string constants at runtime. This is a standard and necessary operation for the skill's primary purpose of rendering a perspective background grid.
  • [REMOTE_CODE_EXECUTION]: The skill references external runtime dependencies from well-known services. These include Iconify for iconography and Tailwind CSS for styling, as documented in the source.json metadata. The demo fetches these scripts from established CDN providers during execution.
  • [DATA_EXPOSURE]: The demo implementation fetches local image assets and converts them to Base64 data for internal transfer to the sandboxed iframe. This process is limited to the demo assets provided within the skill package.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 26, 2026, 01:37 PM
Security Audit — agent-trust-hub — background-grid-webgl