hyperframes
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [External Resource Integration]: The skill utilizes the GSAP animation library, which is loaded via the jsDelivr CDN. This is a standard and well-recognized source for web development libraries.
- [Local Audit and Validation Utilities]: Included scripts like
animation-map.mjsandcontrast-report.mjsfacilitate automated layout and contrast testing. These tools run a local server and a headless browser environment to inspect compositions, which is a common pattern for design and production automation. - [Data Ingestion and Processing]: The skill is designed to ingest and process external content, including audio transcripts and pre-extracted audio data. While processing external data is a typical vector for indirect prompt injection, the skill includes guidance on transcript cleaning and quality checks to mitigate issues related to malformed or unexpected input content.
- [Headless Browser Execution]: The validation tools leverage headless Chrome to render and measure HTML elements. This dynamic execution is scoped to the composition analysis and is used to provide feedback on visual overflows and accessibility standards like WCAG contrast ratios.
- [Dependency Management]: The skill references specific Node.js and Python packages required for its advanced features, such as audio processing and text-to-speech. These resources are aligned with the functionality provided by the vendor.
Audit Metadata