skills/yray/skills/number-details/Gen Agent Trust Hub

number-details

Pass

Audited by Gen Agent Trust Hub on Aug 25, 2026

Risk Level: SAFE
Full Analysis
  • [OBFUSCATION]: The file demo/index.html contains a large Base64-encoded string assigned to encodedHtml. This string decodes to the complete source code of a design demo, which is a standard packaging method for sandboxed design previews. Detailed decoding confirms it contains HTML structure, CSS styles, and UI logic for a resort website showcase.
  • [DYNAMIC_EXECUTION]: The skill uses a sandboxed iframe in demo/index.html to render its visual demo. It dynamically populates the srcdoc attribute of the frame with content decoded from Base64 and assets loaded from the local assets/ directory. This is used for safe UI presentation and does not involve executing untrusted remote code.
  • [EXTERNAL_DOWNLOADS]: The skill references standard assets and runtime libraries from well-known and trusted services. The demo/source.json and decoded demo content include references to:
  • Google Fonts (fonts.googleapis.com, fonts.gstatic.com)
  • Fontshare (api.fontshare.com)
  • GSAP and Three.js via Cloudflare CDNs (cdnjs.cloudflare.com)
  • Iconify (code.iconify.design)
  • Tailwind CSS (cdn.tailwindcss.com)
  • Unsplash for demo images (images.unsplash.com)
  • [COMMAND_EXECUTION]: No shell commands or subprocess executions were found. The skill focuses entirely on UI styling and HTML/CSS structure.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 25, 2026, 03:09 AM
Security Audit — agent-trust-hub — number-details