css-border-gradient

Pass

Audited by Gen Agent Trust Hub on Aug 25, 2026

Risk Level: SAFE
Full Analysis
  • [OBFUSCATION]: The file demo/index.html contains a large Base64-encoded string (encodedHtml) that stores the complete HTML source code for a design demonstration. This technique is used to bundle the demo content within a single file. Decoding reveals a standard HTML document for a floral landing page.
  • [EXTERNAL_DOWNLOADS]: The skill references several external resources, including Google Fonts (fonts.googleapis.com), Fontshare (api.fontshare.com), and various JavaScript libraries (Tailwind CSS, GSAP, Iconify). All referenced external domains belong to well-known and established service providers. The demo/source.json file includes SHA-256 hashes for runtime scripts, enabling integrity verification.
  • [DYNAMIC_EXECUTION]: The demo logic in demo/index.html dynamically decodes the Base64-encoded HTML and injects it into an iframe using the srcdoc attribute. Security risks are mitigated by the use of a strict sandbox="allow-scripts" attribute on the iframe and a restrictive Content Security Policy (CSP) defined within the decoded HTML.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 25, 2026, 03:10 AM
Security Audit — agent-trust-hub — css-border-gradient