globe-particles
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill demo references external assets and runtime scripts from well-known services including Google Fonts (fonts.googleapis.com, fonts.gstatic.com), Cloudflare (cdnjs.cloudflare.com), and Supabase. These are standard resources for web development and are documented in the skill's metadata.
- [COMMAND_EXECUTION]: The skill implements custom WebGL shaders and Three.js logic for particle animation. Analysis of the shader code and the initialization scripts reveals standard mathematical operations for visual effects with no signs of malicious command execution or unauthorized system access.
- [OBFUSCATION]: The demo loader in
demo/index.htmlutilizes a Base64 encoded string to store the demo's HTML content. This is a common packaging technique for self-contained demos. Decoding and analyzing the payload confirms it contains legitimate markup and scripts for the 3D globe visualization without hidden malicious functionality. - [DATA_EXFILTRATION]: No data exfiltration patterns were detected. The asset loading mechanism uses sandboxed iframes and explicitly omits credentials during fetch operations for local assets.
Audit Metadata