image-first-grid-layout
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFEOBFUSCATIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [OBFUSCATION]: The file
demo/index.htmlcontains a large Base64-encoded string (encodedHtml) that stores the complete HTML, CSS, and JavaScript for the botanical design demo. This is a packaging technique used to bundle the demo into a single file for sandboxed execution. - [DYNAMIC_EXECUTION]: The skill uses
iframe.srcdocandpostMessageto dynamically load and execute the decoded HTML and associated assets within a sandboxed environment. This setup prevents the demo code from accessing the parent page's context. - [EXTERNAL_DOWNLOADS]: The skill and its demo reference external assets and libraries from well-known technology providers. Evidence includes:
- Typography and styles fetched from Google Fonts (
fonts.googleapis.com) and Fontshare (api.fontshare.com). - UI components and icons from Iconify (
code.iconify.design). - Design assets (images) hosted on Supabase storage (
supabase.co). - Animation and styling libraries including GSAP (
cdnjs.cloudflare.com) and Tailwind CSS (cdn.tailwindcss.com).
Audit Metadata