hyperframes-keyframes
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
npx hyperframesto perform various diagnostic and verification tasks, including linting, keyframe analysis, and generating visual snapshots or ghosts for debugging. - [EXTERNAL_DOWNLOADS]: The use of the
npxcommand results in the retrieval and execution of thehyperframespackage from the public NPM registry. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to translate user-provided animation descriptions into functional code, which creates a potential surface for indirect injection if user input is not properly handled by the agent.
- Ingestion points: User-provided animation requests and visual descriptions described in the 'Creator editing boundary' section of
SKILL.md. - Boundary markers: None identified in the instructional text for separating user input from system instructions.
- Capability inventory: Execution of CLI commands via
npxas outlined in the 'CLI Proof' section ofSKILL.md. - Sanitization: There are no explicit instructions for the agent to sanitize or validate user-provided parameters (like selectors or timings) before incorporating them into shell commands.
Audit Metadata