image-first-grid-layout

Pass

Audited by Gen Agent Trust Hub on Sep 21, 2026

Risk Level: SAFEOBFUSCATIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [OBFUSCATION]: The file demo/index.html contains a large Base64-encoded string (encodedHtml) that stores the full HTML content of the design demo. This content is decoded and executed at runtime to provide a self-contained preview of the design system.
  • [DYNAMIC_EXECUTION]: The demo runner in demo/index.html dynamically injects code into a sandboxed iframe using the srcdoc attribute. It also includes a bootstrap script that uses URL.createObjectURL to dynamically map asset files to blob URLs and inject them into the DOM at runtime.
  • [EXTERNAL_DOWNLOADS]: The demo system fetches design assets and runtime libraries from external sources. These include image assets hosted on Supabase and essential design libraries (GSAP, Tailwind CSS, Iconify) from well-known public services such as Cloudflare and the official Tailwind CDN infrastructure.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 21, 2026, 01:30 AM
Security Audit — agent-trust-hub — image-first-grid-layout