company-logos
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFE
Full Analysis
- [OBFUSCATION]: The file
demo/index.htmlcontains a large Base64-encoded string (encodedHtml) which decodes to a standard HTML and CSS demo. This is used to package the demo code and does not contain any malicious instructions or hidden threats. - [DYNAMIC_EXECUTION]: The demo environment (
demo/index.html) dynamically decodes and executes content inside a sandboxed iframe. This is a common pattern for UI component previews and is executed within a restricted environment. - [INDIRECT_PROMPT_INJECTION]: The skill processes brand names provided by the user. While it does not use explicit boundary markers to wrap this data, the tool's output is limited to returning logos from a verified icon library, significantly mitigating potential injection risks.
- [UNVERIFIABLE_DEPENDENCIES_AND_REMOTE_CODE_EXECUTION]: The demo environment references and loads several runtime libraries (GSAP, Three.js, Tailwind, Iconify) from well-known and trusted Content Delivery Networks (CDNs) such as Cloudflare and Google. These resources are industry-standard and considered safe.
Audit Metadata