editorial-tech
Pass
Audited by Gen Agent Trust Hub on Nov 11, 2026
Risk Level: SAFEOBFUSCATIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [OBFUSCATION]: The file 'demo/index.html' contains a large Base64-encoded HTML string ('encodedHtml') used to render the skill's demo. Analysis of the decoded content shows it is a legitimate design template for the 'NEUS' brand architecture and contains no malicious instructions or exfiltration logic.
- [DYNAMIC_EXECUTION]: The demo implementation in 'demo/index.html' dynamically creates Blob URLs from Base64-encoded assets and injects them into a sandboxed iframe. This mechanism is used to facilitate a self-contained preview of the design system within the platform environment.
- [EXTERNAL_DOWNLOADS]: The skill and its demo reference well-known external services for fonts and runtime libraries, including Google Fonts, Fontshare, and common CDNs (Cloudflare, Iconify). These are standard dependencies for modern web design and do not represent a security concern.
Audit Metadata