clean-minimal-beige-light-mode
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEOBFUSCATIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [OBFUSCATION]: The file
demo/index.htmlcontains a large Base64-encoded string (encodedHtml) that stores the demo's HTML structure. Decoding this content reveals a standard landing page design for a product named MentorBridge. This technique is used for packaging the demo content within a single file and does not appear to be hiding malicious code. - [DYNAMIC_EXECUTION]: The skill uses
iframe.srcdocindemo/index.htmlto dynamically render the decoded HTML content into a sandboxed environment. It also performs runtime script injection for animation libraries and icons, which is standard behavior for web-based design demos. - [EXTERNAL_DOWNLOADS]: The demo metadata in
demo/source.jsonand the HTML content reference external assets and scripts. These resources are hosted on Supabase (a trusted organization) and well-known services including Cloudflare (cdnjs), Iconify, and Tailwind CSS. These downloads are legitimate and necessary for the design system's functionality.
Audit Metadata