fire-paper-loader
Warn
Audited by Gen Agent Trust Hub on Nov 11, 2026
Risk Level: MEDIUMDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [DYNAMIC_EXECUTION]: The skill utilizes dynamic code execution to bootstrap its animation logic within a Web Worker.
- Evidence: In
demo.html, the script defines a bootloader string (window.__kbBoot) for the Worker that contains(0, eval)(d.src);. This allows the Worker to execute the skill's main script content passed from the main thread viapostMessage. - [EXTERNAL_DOWNLOADS]: The skill fetches resources from well-known external services.
- Evidence:
demo.htmlincludes link tags to download font families from Google Fonts (fonts.googleapis.comandfonts.gstatic.com).
Audit Metadata