hyperframes-keyframes
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes
npx hyperframesto run diagnostic and linting tools from the npm registry. - [COMMAND_EXECUTION]: The skill instructs the agent to execute various CLI commands (e.g.,
hyperframes lint,hyperframes check,hyperframes keyframes, andhyperframes snapshot) to verify animation integrity and capture frame states. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided descriptions of subjects and motion to generate animation code.
- Ingestion points: Animation descriptions provided in the user's prompt are used to derive subjects, visible states, and timing in
SKILL.md. - Boundary markers: The instructions do not explicitly define delimiters or warnings to ignore instructions embedded within the user's descriptions.
- Capability inventory: The agent can write JavaScript and CSS files, and execute the
hyperframesCLI tool vianpx. - Sanitization: No explicit sanitization or validation of the user's descriptive input is mentioned before it is translated into animation code.
Audit Metadata