website-to-hyperframes

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow takes a user-provided URL, runs a website capture tool (npx hyperframes capture <URL>), and ingests extracted web content (visible text, tokens, assets) into the agent's context and video generation steps.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill references external CDNs (cdn.jsdelivr.net) to load runtime libraries (DotLottie and GSAP MotionPathPlugin) inside its technique examples, constituting common/reputable unofficial runtime external dependencies.