hyperframes-registry

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required runtime workflow for this skill is installing registry items (blocks/components) from the configured registry URL and then loading the installed HTML snippets into the host composition via data-composition-src/pasted component HTML, which means outsider-authored free text (the registry’s HTML/CSS/JS content) is ingested into the agent’s LLM context through the CLI’s output/snippet and/or the installed file contents.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly fetches the registry at runtime (e.g. https://raw.githubusercontent.com/heygen-com/hyperframes/main/registry/registry.json) to install items whose fetched HTML/JS can be written into the project and later executed, so this is a runtime external dependency that can deliver and cause execution of remote code.