bootstrap-components
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- EXTERNAL_DOWNLOADS (SAFE): The HTML files reference external Bootstrap assets from the jsDelivr CDN.
- Evidence:
examples/offcanvas-patterns.htmlandexamples/popovers-tooltips-patterns.htmlload CSS and JS fromhttps://cdn.jsdelivr.net/npm/bootstrap@5.3.8/. - Mitigation: Subresource Integrity (SRI) hashes are correctly implemented in both files, ensuring the browser only executes the specific version of the code matching the cryptographic hash, which mitigates risks associated with remote asset delivery.
- SAFE (SAFE): No evidence of prompt injection, data exfiltration, obfuscation, or malicious command execution was found. The inline JavaScript in
examples/popovers-tooltips-patterns.htmlis limited to standard UI component initialization.
Audit Metadata