framed-grid-layout
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEOBFUSCATIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- [OBFUSCATION]: The
demo/index.htmlfile contains a Base64-encoded string (encodedHtml) that packages the HTML and CSS for a visual design demonstration. Decoding reveals standard UI code, assets bootstrapping logic, and a strict Content Security Policy (CSP). - [EXTERNAL_DOWNLOADS]: The demo environment references external resources from established services, including Google Fonts (
fonts.googleapis.com,fonts.gstatic.com) and Fontshare, which are used for typography in the layout demo. - [DYNAMIC_EXECUTION]: The skill implements a sandboxed demonstration using an
<iframe>with thesrcdocattribute. The HTML content is dynamically decoded from a Base64 string at runtime and rendered within a restricted environment (sandbox="allow-scripts") to ensure security isolation.
Audit Metadata