agency-grid-layout-minimal
Fail
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [OBFUSCATION]: The file
demo/index.htmlcontains a large Base64-encoded string assigned to the constantencodedHtml. This string conceals the entire HTML structure and logic of the design demo from static analysis. - [DYNAMIC_EXECUTION]: The demo implementation decodes the
encodedHtmlstring at runtime and dynamically injects the resulting code into a sandboxed iframe using thesrcdocproperty. This mechanism, combined withpostMessagecommunication for asset delivery, represents a high-risk dynamic code execution pattern. - [REMOTE_CODE_EXECUTION]: The skill defines several external runtime scripts as dependencies in
demo/source.json, including libraries from Cloudflare and Iconify. These scripts are executed within the demo environment to provide animation and icon functionality. - [EXTERNAL_DOWNLOADS]: The skill fetches external image assets from Supabase storage and utilizes well-known content delivery networks for runtime dependencies and CSS frameworks.
Recommendations
- AI detected serious security threats
Audit Metadata