hyperframes-registry

Pass

Audited by Gen Agent Trust Hub on Aug 1, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches registry manifests and component source code from the official HeyGen repository at https://raw.githubusercontent.com/heygen-com/hyperframes. This is standard behavior for the registry discovery and installation process.- [COMMAND_EXECUTION]: The skill utilizes the hyperframes CLI tool for installing components (add), initializing projects (init), and validating or previewing compositions (lint, preview).- [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection as it processes data from an external registry to guide agent actions.
  • Ingestion points: Registry manifests (registry.json, registry-item.json) are fetched from GitHub and parsed by the agent in SKILL.md and references/discovery.md.
  • Boundary markers: None identified.
  • Capability inventory: The skill allows the agent to write files via the add command, modify local HTML/JS compositions, and execute CLI tools.
  • Sanitization: No specific sanitization or filtering of registry metadata is described before it is used to influence the agent's wiring instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 1, 2026, 04:37 AM