blue-cloudy-clean-modern
Pass
Audited by Gen Agent Trust Hub on Nov 11, 2026
Risk Level: SAFEOBFUSCATIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [OBFUSCATION]: The file
demo/index.htmlstores the design's source code in a large Base64 encoded string (encodedHtml). This technique is used to bundle the demo's HTML, CSS, and inline JavaScript into a single variable for runtime injection. - [DYNAMIC_EXECUTION]: The skill performs dynamic code injection in
demo/index.html. It decodes the Base64encodedHtmlstring at runtime and assigns it to thesrcdocattribute of a sandboxed iframe to render the design preview. It also dynamically creates Object URLs from Base64-encoded assets for images and styles. - [EXTERNAL_DOWNLOADS]: The demo content fetches resources from well-known and established technology providers, including Google Fonts (
fonts.googleapis.com), Fontshare (api.fontshare.com), and runtime libraries for Tailwind CSS and Iconify. These are standard dependencies for web design and do not represent a security risk.
Audit Metadata