hyperframes-core
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill documents how to process data from external sources and variable attributes.\n
- Ingestion points: Processes sub-compositions from external HTML files (
data-composition-src), variable definitions (data-composition-variables), and per-instance variable overrides (data-variable-values,data-automation).\n - Boundary markers: The documentation does not provide specific instructions for delimiting or ignoring embedded agent instructions within the ingested content.\n
- Capability inventory: The skill framework registers GSAP timelines and invokes the
hyperframes-clifor rendering.\n - Sanitization: No explicit sanitization or validation logic for the external HTML or JSON data is documented.\n- [COMMAND_EXECUTION]: Technical instructions involve using
npx hyperframesfor project validation, snapshots, and rendering. These commands are part of the standard developer workflow for the HyperFrames ecosystem.\n- [DYNAMIC_EXECUTION]: The framework performs runtime evaluation of scripts and styles found within the<template>blocks of sub-compositions to facilitate seekable animations and styling.\n- [EXTERNAL_DOWNLOADS]: The skill references standard libraries such as GSAP and Tailwind CSS from well-known content delivery networks.
Audit Metadata