video-hyperframes
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The generated HTML output references external assets and libraries from well-known services.
- Loads the Tailwind CSS styling framework from
cdn.tailwindcss.com. - Fetches typography assets from Google Fonts (
fonts.googleapis.com). - [INDIRECT_PROMPT_INJECTION]: The skill generates HTML by interpolating user-provided scripts into frame containers, creating a potential surface for indirect injection if the content is viewed in an environment where the generated JavaScript is executed.
- Ingestion points: User-provided content density determines the number of frames and the text content within each
<section>tag in the generated HTML. - Boundary markers: None. User content is placed directly into the HTML structure without specific delimiters.
- Capability inventory: The generated HTML includes a local playback script for UI navigation (frame switching, progress bar) but does not have capabilities for system access, network operations to untrusted domains, or process execution.
- Sanitization: No explicit sanitization or escaping of user content is defined in the skill instructions or template.
Audit Metadata