hyperframes-scene-builder
Pass
Audited by Gen Agent Trust Hub on Jun 14, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use
npx hyperframesfor previewing, linting, and rendering video compositions. These commands are localized to the project directory and are standard for the described video production workflow. - [EXTERNAL_DOWNLOADS]: Utilizes
npxto execute thehyperframespackage, which may be fetched from the public npm registry if not present in the local environment. This is a common practice for Node.js-based tooling. - [INDIRECT_PROMPT_INJECTION]: The skill processes HTML, CSS, and GSAP JavaScript files within the
compositions/directory. - Ingestion points: Reads scene source files (HTML/CSS/JS) from the local file system (e.g.,
compositions/scene-name.html). - Boundary markers: None explicitly defined in the skill instructions to separate file content from agent instructions.
- Capability inventory: Execution of shell commands via
npxfor rendering and linting. - Sanitization: No explicit sanitization or validation of the input HTML/JS is mentioned; however, the skill focuses on structured scene building rather than arbitrary data processing.
Audit Metadata