hyperframes-registry
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches registry manifests and component assets from the official HeyGen HyperFrames repository on GitHub (heygen-com/hyperframes).
- [COMMAND_EXECUTION]: Employs the
hyperframesCLI tool andcurlfor package installation and registry discovery. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data from a registry which serves as a potential surface for indirect injection.
- Ingestion points: Fetches registry manifests and component files from the
heygen-com/hyperframesGitHub repository usingcurlandhyperframes add. - Boundary markers: No explicit delimiters or 'ignore' instructions are used when merging downloaded snippets into project files.
- Capability inventory: Uses the
hyperframesCLI for file writing andcurlfor network requests. - Sanitization: Relies on the integrity of the repository; no local validation or sanitization of the downloaded HTML/JS content is performed before integration.
- [DYNAMIC_EXECUTION]: Instructs the agent to manually extract and merge JavaScript code snippets from installed component templates into the host project's script blocks before the main timeline code.
Audit Metadata