light-mode-paper-technical
Warn
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: MEDIUMOBFUSCATIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [OBFUSCATION]: The file
demo/index.htmlcontains a large Base64-encoded string in theencodedHtmlvariable. This string encodes the entire HTML structure and logic of the design demo, hiding it from plain-text inspection. - [DYNAMIC_EXECUTION]: The skill uses JavaScript in
demo/index.htmlto decode theencodedHtmlstring and dynamically assign it to an iframe'ssrcdocattribute at runtime. - [EXTERNAL_DOWNLOADS]: The demo environment references external assets and runtime scripts from well-known providers, including Google Fonts (fonts.googleapis.com), Fontshare (api.fontshare.com), Tailwind CSS (cdn.tailwindcss.com), and Iconify (code.iconify.design).
Audit Metadata