hyperframes-registry
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches registry manifests and item metadata from HeyGen's official GitHub repository (
raw.githubusercontent.com/heygen-com/hyperframes). This is a standard operation for registry discovery and item installation. - [EXTERNAL_DOWNLOADS]: Templates and documentation reference well-known, established content delivery networks (CDNs) including Google Fonts and JSDelivr for widely-used libraries such as GSAP and Three.js.
- [COMMAND_EXECUTION]: Provides instructions for using the
hyperframesCLI tool and various developer utilities vianpx(e.g.,oxfmt,tsx) for project initialization, linting, rendering, and contribution workflows. - [DATA_EXPOSURE_EXFILTRATION]: Mentions a specific AWS profile name used by internal contributors for image uploads. This is a configuration identifier for internal workflows and does not expose credentials, keys, or sensitive environment data.
- [COMMAND_EXECUTION]: Describes the use of environment variables and browser flags (e.g.,
--enable-unsafe-webgpu) required for WebGPU-based rendering in specific high-performance animation blocks.
Audit Metadata