container-lines
Warn
Audited by Gen Agent Trust Hub on Nov 11, 2026
Risk Level: MEDIUMOBFUSCATIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [OBFUSCATION]: The file
demo/index.htmlcontains a large Base64-encoded string assigned to theencodedHtmlvariable. This encoded block hides a full HTML document, including internal scripts, preventing direct static analysis of the demo's behavior. - [DYNAMIC_EXECUTION]: The demo loader in
demo/index.htmldecodes theencodedHtmlcontent at runtime and executes it by assigning the result to aniframe'ssrcdocattribute. This technique allows for the execution of scripts that are not visible in the source file in plain text. - [EXTERNAL_DOWNLOADS]: The skill's demo configuration and runtime scripts reference resources from well-known technology infrastructure and cloud providers, including Google Fonts, Cloudflare's CDN (for GSAP libraries), Tailwind CSS, Iconify, and Supabase's storage service.
Audit Metadata