hyperframes-core
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill defines architectural and technical rules for the HyperFrames framework, which is designed to render video from HTML and JavaScript.
- [EXTERNAL_DOWNLOADS]: The skill references well-known libraries such as GSAP and Tailwind CSS from established CDNs (jsDelivr and the official Tailwind browser runtime). These are standard dependencies for the described functionality.
- [COMMAND_EXECUTION]: The skill instructs the agent to use
npx hyperframesCLI tools for project management tasks such as linting, validation, and rendering. These tools are provided by the vendor (openmontageinc) and are integral to the skill's primary purpose. - [INDIRECT_PROMPT_INJECTION]: The skill involves processing user-provided storyboard and script files to generate video compositions. While this creates an attack surface for indirect prompt injection, the documentation includes guidelines for variable validation and strict typing, and the risk is inherent to the task of code generation from user input.
- [DYNAMIC_EXECUTION]: The agent is instructed to generate HTML files containing JavaScript (GSAP timelines). This code is intended to be executed within the HyperFrames runtime environment to drive animation rendering, which is the core function of the skill.
Audit Metadata