hyperframes-registry
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches registry manifests and component source code from the official HeyGen repository at https://raw.githubusercontent.com/heygen-com/hyperframes. This is standard behavior for the registry discovery and installation process.- [COMMAND_EXECUTION]: The skill utilizes the
hyperframesCLI tool for installing components (add), initializing projects (init), and validating or previewing compositions (lint,preview).- [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection as it processes data from an external registry to guide agent actions. - Ingestion points: Registry manifests (registry.json, registry-item.json) are fetched from GitHub and parsed by the agent in SKILL.md and references/discovery.md.
- Boundary markers: None identified.
- Capability inventory: The skill allows the agent to write files via the
addcommand, modify local HTML/JS compositions, and execute CLI tools. - Sanitization: No specific sanitization or filtering of registry metadata is described before it is used to influence the agent's wiring instructions.
Audit Metadata