hyperframes-registry
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches registry manifests and component source files from the official HyperFrames repository on GitHub (heygen-com/hyperframes).
- [COMMAND_EXECUTION]: The skill utilizes command-line tools such as npx, hyperframes, and curl for registry discovery, installation, and project automation.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a system for incorporating external components into local project files, which represents an attack surface for indirect prompt injection if the registry source is compromised.
- Ingestion points: Registry metadata and HTML component snippets are retrieved from the hyperframes repository.
- Boundary markers: No specific delimiters or safety warnings are implemented for the content of registry items.
- Capability inventory: The skill uses subprocess calls for rendering, linting, and publishing compositions via the hyperframes CLI.
- Sanitization: No explicit sanitization or validation of the fetched component code is performed.
Audit Metadata