website-to-hyperframes
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from captured websites to generate narration scripts and video compositions.
- Ingestion points: Website data is extracted into files like
extracted/visible-text.txtandextracted/tokens.json(references/step-1-capture.md). - Boundary markers: Absent; the agent is instructed to read the raw extracted files and incorporate specific numbers and features directly into scripts.
- Capability inventory: The skill uses
npx hyperframesfor various tasks, performs file writes, and generates executable Javascript for compositions. - Sanitization: Absent; the workflow relies on the agent to manually summarize and transcribe the captured text.
- [EXTERNAL_DOWNLOADS]: The skill references external assets and tools from well-known and trusted sources.
- Fetches animation libraries (Lottie, GSAP) from
jsdelivr, a well-known CDN (references/techniques.md). - Downloads typography assets from Google Fonts (references/techniques.md).
- Uses
npxto execute thehyperframesandtsxpackages at runtime. - [DYNAMIC_EXECUTION]: The skill involves generating Javascript-based compositions at runtime.
- Generates HTML and GSAP (Javascript) code for video scenes based on the brand identity and captured website assets (references/step-6-build.md). This dynamic generation is the primary purpose of the skill.
Audit Metadata