glass-dark-mode-clock
Fail
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: HIGHOBFUSCATIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [OBFUSCATION]: The
demo/index.htmlfile utilizes theatob()andTextDecoderfunctions to process a large string variable (encodedHtml) that contains the demo's HTML structure and JavaScript logic. The use of Base64 encoding to wrap executable code is a common obfuscation technique.\n- [DYNAMIC_EXECUTION]: The script indemo/index.htmldynamically constructs the content of an internaliframeat runtime. It decodes a template from theencodedHtmlvariable, injects local runtime script paths, and sets thesrcdocproperty of theiframeto the resulting string.\n- [EXTERNAL_DOWNLOADS]: The skill's demo configuration includes references to external font resources fromfonts.googleapis.com,fonts.gstatic.com, andapi.fontshare.com. These are well-known and trusted providers for web design assets.
Recommendations
- AI detected serious security threats
Audit Metadata