container-lines

Warn

Audited by Gen Agent Trust Hub on Nov 11, 2026

Risk Level: MEDIUMOBFUSCATIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [OBFUSCATION]: The file demo/index.html contains a large Base64-encoded string assigned to the encodedHtml variable. This encoded block hides a full HTML document, including internal scripts, preventing direct static analysis of the demo's behavior.
  • [DYNAMIC_EXECUTION]: The demo loader in demo/index.html decodes the encodedHtml content at runtime and executes it by assigning the result to an iframe's srcdoc attribute. This technique allows for the execution of scripts that are not visible in the source file in plain text.
  • [EXTERNAL_DOWNLOADS]: The skill's demo configuration and runtime scripts reference resources from well-known technology infrastructure and cloud providers, including Google Fonts, Cloudflare's CDN (for GSAP libraries), Tailwind CSS, Iconify, and Supabase's storage service.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Nov 11, 2026, 04:46 PM