background-grid-webgl
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFE
Full Analysis
- [OBFUSCATION]: The
demo/index.htmlfile includes a large Base64-encoded string (encodedHtml) containing the HTML, CSS, and JavaScript for the demo page. This content is decoded at runtime and injected into a sandboxediframeusing thesrcdocattribute to ensure a controlled environment for the visual components. - [DYNAMIC_EXECUTION]: The demo's WebGL implementation utilizes
gl.compileShaderto compile vertex and fragment shaders from string constants at runtime. This is a standard and necessary operation for the skill's primary purpose of rendering a perspective background grid. - [REMOTE_CODE_EXECUTION]: The skill references external runtime dependencies from well-known services. These include Iconify for iconography and Tailwind CSS for styling, as documented in the
source.jsonmetadata. The demo fetches these scripts from established CDN providers during execution. - [DATA_EXPOSURE]: The demo implementation fetches local image assets and converts them to Base64 data for internal transfer to the sandboxed iframe. This process is limited to the demo assets provided within the skill package.
Audit Metadata