hyperframes-registry
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches registry manifests and component files from the official HeyGen GitHub organization repository (raw.githubusercontent.com/heygen-com/hyperframes). It also references standard libraries (GSAP, Three.js) and font services from well-known CDNs (jsDelivr, Google Fonts).
- [COMMAND_EXECUTION]: The skill utilizes the npx hyperframes CLI for primary operations, including catalog searching, component installation (add), and project initialization (init), as well as quality checks (lint, check).
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided visual descriptions and search queries to find matching components. Ingestion points: User input enters the system through search queries via the npx hyperframes catalog command. Boundary markers: The interaction is constrained to registry lookups and standard CLI parameters. Capability inventory: The skill can perform shell commands, file writes to the local project directories (compositions/), and network requests to vendor domains. Sanitization: Registry search is performed against a known manifest, and commands are structured via a dedicated CLI tool.
Audit Metadata