hyperframes-media

Pass

Audited by Gen Agent Trust Hub on May 13, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to install Python dependencies kokoro-onnx and soundfile via pip.
  • [EXTERNAL_DOWNLOADS]: The skill uses npx hyperframes which downloads and executes the hyperframes package from the npm registry.
  • [REMOTE_CODE_EXECUTION]: The toolkit automatically downloads AI model weights (Kokoro, Whisper, and u2net) from remote sources upon the first execution of its commands. These models are cached locally in the ~/.cache/hyperframes/ directory.
  • [COMMAND_EXECUTION]: The skill relies on shell command execution for its primary functionality, providing numerous examples for processing audio, video, and text assets.
  • [COMMAND_EXECUTION]: Documentation includes instructions for installing system-level dependencies like espeak-ng using package managers (brew or apt-get), which may require elevated privileges.
Audit Metadata
Risk Level
SAFE
Analyzed
May 13, 2026, 02:54 PM
Security Audit — agent-trust-hub — hyperframes-media