book-serif-index

Warn

Audited by Gen Agent Trust Hub on Oct 29, 2026

Risk Level: MEDIUMOBFUSCATIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [OBFUSCATION]: The file demo/index.html contains a large Base64-encoded string in the encodedHtml variable that stores the complete source code of the design demo. This obscures the demo's HTML, CSS, and JavaScript implementation from direct inspection tools.\n- [DYNAMIC_EXECUTION]: The skill uses client-side JavaScript to decode the encodedHtml data and dynamically inject it into a sandboxed iframe using the srcdoc attribute at runtime.\n- [EXTERNAL_DOWNLOADS]: The demo fetches external assets and runtime libraries from well-known providers, including Cloudflare's CDN (GSAP, ScrollTrigger, Three.js), Google Fonts, Tailwind CSS, and Supabase. These resources are listed in a manifest file (source.json) with integrity hashes.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 29, 2026, 04:26 PM