hyperframes
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the
hyperframesCLI and the@hyperframes/producerpackage. These are part of the HeyGen/HyperFrames ecosystem, which is a well-known service in the AI video domain. These references are used for legitimate functionality such as transcription, rendering, and text-to-speech. - [COMMAND_EXECUTION]: Instructions involve using
npx hyperframesCLI tools for standard development workflows including linting, validation, and rendering. This is expected behavior for the framework. - [DATA_EXFILTRATION]: No exfiltration patterns were detected. The included Node.js scripts process local composition files to generate analysis reports and do not communicate with external servers for sensitive data collection.
- [PROMPT_INJECTION]: The instructions use strong language like "non-negotiable" to enforce design standards and consistency, but no patterns suggesting an attempt to override AI safety filters or exfiltrate system prompts were found.
- [REMOTE_CODE_EXECUTION]: No remote code execution or suspicious piped commands were found. The skill relies on standard package dependencies and local scripts for its utility functions.
Audit Metadata