hyperframes

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In SKILL.md the runtime diagnostics read first-party composition DOM text during npx hyperframes validate (via scripts/contrast-report.mjs), and this DOM text can originate from user-supplied/transcript content.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes a runtime script tag that loads and executes GSAP from the CDN (https://cdn.jsdelivr.net/npm/gsap@3.14.2/dist/gsap.min.js), which is a required runtime dependency that injects remote executable code into compositions.