hyperframes-keyframes
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
npx hyperframesCLI to perform various tasks such as linting, checking, and generating snapshots of animations. These commands are executed locally within the project directory. - [EXTERNAL_DOWNLOADS]: The use of
npxentails downloading thehyperframespackage from the public npm registry if it is not already present. Additionally, the skill links to documentation from well-known and trusted technology providers like GSAP, MDN, and Three.js. - [PROMPT_INJECTION]: The skill contains an attack surface for indirect prompt injection as it processes external diagnostic data.
- Ingestion points: User prompts for animation logic and the output generated by
hyperframesdiagnostic commands. - Boundary markers: Not explicitly defined in the provided instructions.
- Capability inventory: Shell command execution via the
npxutility. - Sanitization: No specific sanitization or validation of the CLI tool output is described.
Audit Metadata