hyperframes-keyframes

Pass

Audited by Gen Agent Trust Hub on Aug 19, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the npx hyperframes CLI to perform various tasks such as linting, checking, and generating snapshots of animations. These commands are executed locally within the project directory.
  • [EXTERNAL_DOWNLOADS]: The use of npx entails downloading the hyperframes package from the public npm registry if it is not already present. Additionally, the skill links to documentation from well-known and trusted technology providers like GSAP, MDN, and Three.js.
  • [PROMPT_INJECTION]: The skill contains an attack surface for indirect prompt injection as it processes external diagnostic data.
  • Ingestion points: User prompts for animation logic and the output generated by hyperframes diagnostic commands.
  • Boundary markers: Not explicitly defined in the provided instructions.
  • Capability inventory: Shell command execution via the npx utility.
  • Sanitization: No specific sanitization or validation of the CLI tool output is described.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 19, 2026, 03:17 AM
Security Audit — agent-trust-hub — hyperframes-keyframes