gooey-blob-system
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEOBFUSCATIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- [OBFUSCATION]: The demo file
demo/index.htmluses a Base64 encoded string to store the demo's HTML and JavaScript content. This technique is used for local packaging of the sandboxed preview and does not contain malicious instructions. - [EXTERNAL_DOWNLOADS]: The demo fetches runtime libraries including GSAP, ScrollTrigger, Iconify, and Tailwind CSS from established and trusted Content Delivery Networks (CDNs) such as Cloudflare and official vendor domains.
- [DYNAMIC_EXECUTION]: The skill's demo executes its bundled content within an iframe using the
srcdocproperty. This execution is scoped within a restricted sandbox environment usingallow-scriptsand appropriate Content Security Policy (CSP) headers.
Audit Metadata