gooey-blob-system
Pass
Audited by Gen Agent Trust Hub on Nov 11, 2026
Risk Level: SAFEOBFUSCATIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [OBFUSCATION]: The
demo/index.htmlfile contains a large Base64-encoded string (encodedHtml) that stores the entire HTML content for a sandboxed visual demo. - [DYNAMIC_EXECUTION]: The skill uses JavaScript in
demo/index.htmlto dynamically decode the Base64 content and inject it into an iframe using thesrcdocattribute, alongside runtime generation ofBlobURLs for local assets. - [EXTERNAL_DOWNLOADS]: The sandboxed demo environment fetches configuration and runtime libraries (Tailwind CSS, GSAP, Iconify) from well-known services including
cdn.tailwindcss.com,cdnjs.cloudflare.com, andcode.iconify.design. - [INDIRECT_PROMPT_INJECTION]: The skill provides an external HTML demo as a primary visual and behavioral reference, creating a potential surface where embedded instructions in the processed data could influence the agent's behavior.
- Ingestion points: The
demo/index.htmlfile is provided as a ground-truth visual reference for the agent to analyze. - Boundary markers: None; instructions treat the demo content as an authoritative reference for design logic.
- Capability inventory: The skill's primary focus is visual code generation (HTML/CSS/SVG) and does not utilize high-privilege capabilities such as file-system writes or network exfiltration tools.
- Sanitization: None; the demo code is ingested directly into the agent's context.
Audit Metadata