fire-paper-loader

Warn

Audited by Gen Agent Trust Hub on Nov 11, 2026

Risk Level: MEDIUMDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [DYNAMIC_EXECUTION]: The skill utilizes dynamic code execution to bootstrap its animation logic within a Web Worker.
  • Evidence: In demo.html, the script defines a bootloader string (window.__kbBoot) for the Worker that contains (0, eval)(d.src);. This allows the Worker to execute the skill's main script content passed from the main thread via postMessage.
  • [EXTERNAL_DOWNLOADS]: The skill fetches resources from well-known external services.
  • Evidence: demo.html includes link tags to download font families from Google Fonts (fonts.googleapis.com and fonts.gstatic.com).
Audit Metadata
Risk Level
MEDIUM
Analyzed
Nov 11, 2026, 04:45 PM