glass-dark-mode-clock

Pass

Audited by Gen Agent Trust Hub on Aug 26, 2026

Risk Level: SAFE
Full Analysis
  • [OBFUSCATION]: The file demo/index.html contains a large Base64-encoded string (encodedHtml) representing the HTML content for a sandboxed design demo. This is a common pattern for packaging demo assets to prevent direct interaction or modification by the agent during skill loading.\n
  • Evidence: The encodedHtml variable contains the full document structure, styles, and logic for the demo interface.\n- [DYNAMIC_EXECUTION]: The skill decodes the Base64 content at runtime and loads it into a sandboxed iframe using the srcdoc attribute. It also utilizes WebGL for visual effects, which includes standard runtime shader compilation.\n
  • Evidence: The script in demo/index.html decodes the string and handles asset loading via postMessage.\n- [EXTERNAL_DOWNLOADS]: The demo references well-known services for typography and design assets, including Google Fonts and Fontshare. These are recognized as safe, established service providers.\n
  • Evidence: Decoded HTML contains references to https://fonts.googleapis.com, https://fonts.gstatic.com, and https://api.fontshare.com.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 26, 2026, 01:38 PM
Security Audit — agent-trust-hub — glass-dark-mode-clock