css-border-gradient
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFE
Full Analysis
- [OBFUSCATION]: The file
demo/index.htmlcontains a large Base64-encoded string (encodedHtml) that stores the complete HTML source code for a design demonstration. This technique is used to bundle the demo content within a single file. Decoding reveals a standard HTML document for a floral landing page. - [EXTERNAL_DOWNLOADS]: The skill references several external resources, including Google Fonts (
fonts.googleapis.com), Fontshare (api.fontshare.com), and various JavaScript libraries (Tailwind CSS, GSAP, Iconify). All referenced external domains belong to well-known and established service providers. Thedemo/source.jsonfile includes SHA-256 hashes for runtime scripts, enabling integrity verification. - [DYNAMIC_EXECUTION]: The demo logic in
demo/index.htmldynamically decodes the Base64-encoded HTML and injects it into an iframe using thesrcdocattribute. Security risks are mitigated by the use of a strictsandbox="allow-scripts"attribute on the iframe and a restrictive Content Security Policy (CSP) defined within the decoded HTML.
Audit Metadata