gooey-blob-system

Pass

Audited by Gen Agent Trust Hub on Nov 11, 2026

Risk Level: SAFEOBFUSCATIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [OBFUSCATION]: The demo/index.html file contains a large Base64-encoded string (encodedHtml) that stores the entire HTML content for a sandboxed visual demo.
  • [DYNAMIC_EXECUTION]: The skill uses JavaScript in demo/index.html to dynamically decode the Base64 content and inject it into an iframe using the srcdoc attribute, alongside runtime generation of Blob URLs for local assets.
  • [EXTERNAL_DOWNLOADS]: The sandboxed demo environment fetches configuration and runtime libraries (Tailwind CSS, GSAP, Iconify) from well-known services including cdn.tailwindcss.com, cdnjs.cloudflare.com, and code.iconify.design.
  • [INDIRECT_PROMPT_INJECTION]: The skill provides an external HTML demo as a primary visual and behavioral reference, creating a potential surface where embedded instructions in the processed data could influence the agent's behavior.
  • Ingestion points: The demo/index.html file is provided as a ground-truth visual reference for the agent to analyze.
  • Boundary markers: None; instructions treat the demo content as an authoritative reference for design logic.
  • Capability inventory: The skill's primary focus is visual code generation (HTML/CSS/SVG) and does not utilize high-privilege capabilities such as file-system writes or network exfiltration tools.
  • Sanitization: None; the demo code is ingested directly into the agent's context.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 11, 2026, 04:46 PM