hyperframes-cli
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill documents the use of various subcommands under npx hyperframes to initialize projects, lint code, inspect visual layouts, and render media files. These commands are standard for a command-line interface dedicated to media production.
- [EXTERNAL_DOWNLOADS]: The skill mentions that commands for Text-to-Speech (TTS), transcription, and background removal download necessary AI models upon their first execution. Additionally, npx is used to fetch and run the CLI tool from the public npm registry.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it ingests untrusted data from project files and JSON variables. Ingestion points: Project HTML and variable files (SKILL.md). Boundary markers: Absent. Capability inventory: Shell command execution via npx and file writing. Sanitization: Absent. This surface is required for the tool's visual inspection and rendering features.
Audit Metadata