skills/yray/skills/globe-particles/Gen Agent Trust Hub

globe-particles

Pass

Audited by Gen Agent Trust Hub on Aug 25, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill demo references external assets and runtime scripts from well-known services including Google Fonts (fonts.googleapis.com, fonts.gstatic.com), Cloudflare (cdnjs.cloudflare.com), and Supabase. These are standard resources for web development and are documented in the skill's metadata.
  • [COMMAND_EXECUTION]: The skill implements custom WebGL shaders and Three.js logic for particle animation. Analysis of the shader code and the initialization scripts reveals standard mathematical operations for visual effects with no signs of malicious command execution or unauthorized system access.
  • [OBFUSCATION]: The demo loader in demo/index.html utilizes a Base64 encoded string to store the demo's HTML content. This is a common packaging technique for self-contained demos. Decoding and analyzing the payload confirms it contains legitimate markup and scripts for the 3D globe visualization without hidden malicious functionality.
  • [DATA_EXFILTRATION]: No data exfiltration patterns were detected. The asset loading mechanism uses sandboxed iframes and explicitly omits credentials during fetch operations for local assets.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 25, 2026, 03:10 AM
Security Audit — agent-trust-hub — globe-particles