Skills
Navigate
skills/heygen-com/hyperframes/hyperframes-animation/Gen Agent Trust Hub

hyperframes-animation

Warn

Audited by Gen Agent Trust Hub on Jun 26, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill contains logic to download and install external software at runtime.
  • The file scripts/package-loader.mjs contains a bootstrapWithNpmInstall function that executes npm install to fetch dependencies like @hyperframes/producer into a temporary directory.
  • Multiple HTML files and rules (e.g., SKILL.md, rules/3d-page-scroll.md, examples/proof-logo-chain.html) fetch JavaScript libraries from third-party CDNs including cdn.jsdelivr.net, cdnjs.cloudflare.com, and unpkg.com.
  • [REMOTE_CODE_EXECUTION]: The skill script can execute code downloaded from the internet.
  • scripts/package-loader.mjs uses importPackagesOrBootstrap to dynamically install packages via npm and then immediately performs an import() on the resulting files to use them in the animation-map.mjs audit script.
  • The animation-map.mjs script utilizes session.page.evaluate to execute JavaScript within a headless browser context to inspect animation timelines.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 26, 2026, 04:00 PM
Security Audit — agent-trust-hub — hyperframes-animation