dither-background

Pass

Audited by Gen Agent Trust Hub on Aug 26, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The core functionality is implemented using standard HTML5 Canvas and JavaScript graphics math, including procedural noise generation (fbm, value noise) and Bayer-style ordered dithering. No malicious logic was found in these implementations.
  • [SAFE]: The demo implementation in demo/index.html utilizes a sandboxed iframe with the srcdoc attribute, which is a common and safe pattern for isolated UI demonstrations. The document is protected by multiple Content Security Policy (CSP) headers that restrict network connections and script execution.
  • [SAFE]: No hardcoded credentials, sensitive file access patterns, or data exfiltration attempts were detected. The skill primarily handles visual data and local canvas state.
  • [SAFE]: External dependencies identified in demo/source.json (Google Fonts, Fontshare, Iconify) are well-known, established services for web typography and icons.
  • [SAFE]: The Base64 encoding used for the demo's encodedHtml is a packaging technique for the sandboxed environment and does not contain any malicious or hidden instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 26, 2026, 01:38 PM
Security Audit — agent-trust-hub — dither-background