number-details
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFE
Full Analysis
- [OBFUSCATION]: The file
demo/index.htmlcontains a large Base64-encoded string assigned toencodedHtml. This string decodes to the complete source code of a design demo, which is a standard packaging method for sandboxed design previews. Detailed decoding confirms it contains HTML structure, CSS styles, and UI logic for a resort website showcase. - [DYNAMIC_EXECUTION]: The skill uses a sandboxed
iframeindemo/index.htmlto render its visual demo. It dynamically populates thesrcdocattribute of the frame with content decoded from Base64 and assets loaded from the localassets/directory. This is used for safe UI presentation and does not involve executing untrusted remote code. - [EXTERNAL_DOWNLOADS]: The skill references standard assets and runtime libraries from well-known and trusted services. The
demo/source.jsonand decoded demo content include references to: - Google Fonts (
fonts.googleapis.com,fonts.gstatic.com) - Fontshare (
api.fontshare.com) - GSAP and Three.js via Cloudflare CDNs (
cdnjs.cloudflare.com) - Iconify (
code.iconify.design) - Tailwind CSS (
cdn.tailwindcss.com) - Unsplash for demo images (
images.unsplash.com) - [COMMAND_EXECUTION]: No shell commands or subprocess executions were found. The skill focuses entirely on UI styling and HTML/CSS structure.
Audit Metadata