hyperframes-keyframes
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes
npxto fetch and run thehyperframesutility for keyframe diagnostics and references documentation from well-known sources including GSAP, Anime.js, Three.js, and MDN. - [COMMAND_EXECUTION]: Shell-based diagnostic tools such as
hyperframes lint,hyperframes check,hyperframes keyframes, andhyperframes snapshotare executed to verify animation compositions. - [INDIRECT_PROMPT_INJECTION]: The skill processes project files from the local directory which creates an attack surface for instructions embedded in external data.
- Ingestion points: Local project directory (
.) containing code and assets. - Boundary markers: No instructions are present to distinguish between user-authored data and system instructions.
- Capability inventory: CLI-driven shell execution and file system access.
- Sanitization: No explicit sanitization or validation of project content is performed before processing.
Audit Metadata