masked-reveal
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The core animation logic in
SKILL.mdincludes a helper functionescapeHTMLto sanitize text content before it is processed and re-inserted into the DOM, mitigating risks associated with untrusted data ingestion. - [EXTERNAL_DOWNLOADS]: The demo environment references external runtime dependencies, including GSAP and ScrollTrigger libraries from Cloudflare's CDN and icon resources from Iconify. These are well-known technology services and are used appropriately for the skill's functionality.
- [SAFE]: The
demo/index.htmlfile bundles its demo content using a Base64 encoded string. Analysis of the decoded content reveals a standard HTML structure for a design preview with restrictive Content Security Policies, demonstrating a commitment to secure sandboxing rather than malicious obfuscation.
Audit Metadata