hyperframes-creative

Pass

Audited by Gen Agent Trust Hub on Sep 20, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The scripts/package-loader.mjs script manages the installation of optional helper packages from the npm registry. It implements several security layers, including version pinning, disabling package lifecycle scripts via --ignore-scripts, and performing installations into temporary directories to protect the host environment.
  • [COMMAND_EXECUTION]: The scripts/extract-audio-data.py script executes the ffmpeg utility via subprocess.run to extract per-frame audio data. The execution is handled safely by passing arguments as a list and avoiding shell execution, minimizing the risk of command injection.
  • [DYNAMIC_EXECUTION]: The skill uses a dynamic import pattern in scripts/package-loader.mjs to load the bootstrapped helper modules after they have been successfully installed. This is a standard architectural choice for managing optional tool dependencies in this framework.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 20, 2026, 03:24 AM
Security Audit — agent-trust-hub — hyperframes-creative