hyperframes-cli

SUSPICIOUS: the functional scope fits a video-rendering CLI, but trust is weakened by a publisher mismatch, runtime npm execution, bundled binary management, and especially transitive skill installation during `init`. This looks more like a legitimate but higher-risk developer skill than confirmed malware.