hyperframes-card-news
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides structured templates and instructions for creating mobile-formatted card news. All identified external resources, such as Google Fonts and the GSAP library (via CDN), are standard, well-known, and trusted services.
- [COMMAND_EXECUTION]: The skill includes shell commands (
cp,npx hyperframes,grep,bash) within the documentation. These are routine development operations for file management, linting, and serving local content, posing no risk to the environment. - [REMOTE_CODE_EXECUTION]: The HTML templates load the GSAP animation library from
cdn.jsdelivr.net. This is a standard and reputable CDN for front-end development. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided news content to generate cards. While it lacks explicit sanitization markers, the risk is minimal as the output is static HTML/GSAP animation code meant for rendering into mp4, and the skill's scope is confined to this media generation task.
Audit Metadata