hyperframes-core

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow reads free text from the project’s user-authored STORYBOARD.md (frames’ scene and voiceover narrative text) and then inlines that content into frame-worker packets via scripts/lib/frame-packets-core.mjs, which the sub-agents use at runtime.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The documentation includes an explicit runtime script tag that fetches and executes remote JS (GSAP) — https://cdn.jsdelivr.net/npm/gsap@3.14.2/dist/gsap.min.js — which the system uses as the primary animation runtime, so this external URL would be fetched and execute code during composition runtime.