hyperframes-registry

Pass

Audited by Gen Agent Trust Hub on Oct 13, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches registry manifests and component assets from the official HeyGen HyperFrames repository on GitHub (heygen-com/hyperframes).
  • [COMMAND_EXECUTION]: Employs the hyperframes CLI tool and curl for package installation and registry discovery.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external data from a registry which serves as a potential surface for indirect injection.
  • Ingestion points: Fetches registry manifests and component files from the heygen-com/hyperframes GitHub repository using curl and hyperframes add.
  • Boundary markers: No explicit delimiters or 'ignore' instructions are used when merging downloaded snippets into project files.
  • Capability inventory: Uses the hyperframes CLI for file writing and curl for network requests.
  • Sanitization: Relies on the integrity of the repository; no local validation or sanitization of the downloaded HTML/JS content is performed before integration.
  • [DYNAMIC_EXECUTION]: Instructs the agent to manually extract and merge JavaScript code snippets from installed component templates into the host project's script blocks before the main timeline code.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 13, 2026, 03:00 PM