image-first-grid-layout
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEOBFUSCATIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [OBFUSCATION]: The file
demo/index.htmlcontains a large Base64-encoded string (encodedHtml) that stores the full HTML content of the design demo. This content is decoded and executed at runtime to provide a self-contained preview of the design system. - [DYNAMIC_EXECUTION]: The demo runner in
demo/index.htmldynamically injects code into a sandboxediframeusing thesrcdocattribute. It also includes a bootstrap script that usesURL.createObjectURLto dynamically map asset files to blob URLs and inject them into the DOM at runtime. - [EXTERNAL_DOWNLOADS]: The demo system fetches design assets and runtime libraries from external sources. These include image assets hosted on Supabase and essential design libraries (GSAP, Tailwind CSS, Iconify) from well-known public services such as Cloudflare and the official Tailwind CDN infrastructure.
Audit Metadata