hyperframes
Pass
Audited by Gen Agent Trust Hub on May 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
scripts/package-loader.mjsto download and install necessary npm dependencies like@hyperframes/producerandsharp. The process is guarded by version pinning and the--ignore-scriptsflag to prevent malicious lifecycle script execution.\n- [REMOTE_CODE_EXECUTION]: Project rendering and media transcription tasks are performed usingnpxto run HyperFrames CLI subcommands, which dynamically download and execute code from the npm registry.\n- [COMMAND_EXECUTION]: Various shell utilities includingopenssl,jq, anddateare used within the workflow to manage project assets and provide unique identifiers for caching mechanisms.\n- [PROMPT_INJECTION]: The skill ingests user-provided text for generating voiceovers and captions. This text is processed within the browser-based rendering engine, representing a standard indirect prompt injection surface for media tools.
Audit Metadata