book-serif-index
Pass
Audited by Gen Agent Trust Hub on Nov 11, 2026
Risk Level: SAFEOBFUSCATIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [OBFUSCATION]: The file
demo/index.htmlcontains a large Base64-encoded string assigned to the variableencodedHtml. This string encodes the full source code of the design demo—including HTML, CSS, and JavaScript—which hides the implementation details from static plain-text analysis. - [DYNAMIC_EXECUTION]: The demo loader in
demo/index.htmluses a script to decode theencodedHtmlBase64 string at runtime and inject the resulting source into aniframevia thesrcdocattribute. This allows the skill to execute embedded scripts and rendering logic dynamically to display the interactive demo. - [EXTERNAL_DOWNLOADS]: The design demo references and fetches resources from well-known and trusted technology services:
- Cloudflare (cdnjs): Downloads animation and 3D libraries including GSAP, ScrollTrigger, and Three.js.
- Google Fonts: Retrieves typography resources from
fonts.googleapis.comandfonts.gstatic.com. - Tailwind CSS: Fetches the styling runtime from
cdn.tailwindcss.com. - Supabase: Downloads project-specific image assets from a Supabase storage domain.
- Iconify: Fetches iconography assets from
code.iconify.design.
Audit Metadata