hyperframes-video-composition
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill's test suite, located in
tests/test_audit_timeline.py, utilizessubprocess.runto execute the included Python preflight script (scripts/audit_timeline.py). This is a legitimate and standard use of command execution to verify tool functionality within a controlled testing environment. - [EXTERNAL_DOWNLOADS]: The skill instructions reference the use of
npx hyperframescommands, which trigger the download and execution of the HyperFrames package from the official npm registry. These references target the official tooling provided by HeyGen, a well-known provider in the AI media space, and align with expected workflow requirements for this technology. - [REMOTE_CODE_EXECUTION]: The workflow relies on the
npxutility to run the HyperFrames CLI. This involves the dynamic acquisition and execution of code from a remote registry (npm). The analysis indicates this is the intended and documented way to interact with the HyperFrames production environment.
Audit Metadata