nested-container-clean-agency
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFEOBFUSCATIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- [OBFUSCATION]: The file
demo/index.htmlstores the demo's HTML and logic within a Base64-encoded string. This is a common bundling technique used to package assets within single-file demo environments. - [EXTERNAL_DOWNLOADS]: The skill references font and design assets from well-known technology services, including Google Fonts, Fontshare, and Iconify. These references are standard for the skill's intended purpose.
- [DYNAMIC_EXECUTION]: The demo content is dynamically loaded into an isolated iframe using the
srcdocattribute. This execution is restricted by thesandboxattribute and a Content Security Policy (CSP) defined within the demo content, which limits script execution and network access to pre-approved sources.
Audit Metadata