The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill uses the hyperframes add command and curl to fetch registry metadata and component source files from raw.githubusercontent.com/heygen-com/. This is the intended mechanism for component discovery and installation from the project's official repository.
[COMMAND_EXECUTION]: The documentation guides the agent to use various command-line tools, including the hyperframes CLI (for adding, linting, and rendering), git (for version control), and gh (for GitHub pull requests). These tools are standard for the described development and contribution workflows.
[INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest and process data from external registry manifests and HTML/JS component snippets. This ingestion of untrusted external content represents a surface for indirect prompt injection.
Ingestion points: Registry manifests (registry.json) and component files (HTML/CSS/JS) downloaded from the remote registry URL defined in SKILL.md and referenced in references/discovery.md.
Boundary markers: None identified in the instructions. The agent is directed to read and merge the content directly into the user's composition files.
Capability inventory: File system operations (writing components), command execution (hyperframes CLI, npx utilities), and network operations (git, gh, curl) as detailed in references/contributing.md.
Sanitization: No explicit sanitization or filtering of external content is mentioned, though the skill recommends running hyperframes lint and validate after integration to check for structural correctness.

hyperframes-registry