hyperframes

Pass

Audited by Gen Agent Trust Hub on Aug 1, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references the hyperframes CLI and the @hyperframes/producer package. These are part of the HeyGen/HyperFrames ecosystem, which is a well-known service in the AI video domain. These references are used for legitimate functionality such as transcription, rendering, and text-to-speech.
  • [COMMAND_EXECUTION]: Instructions involve using npx hyperframes CLI tools for standard development workflows including linting, validation, and rendering. This is expected behavior for the framework.
  • [DATA_EXFILTRATION]: No exfiltration patterns were detected. The included Node.js scripts process local composition files to generate analysis reports and do not communicate with external servers for sensitive data collection.
  • [PROMPT_INJECTION]: The instructions use strong language like "non-negotiable" to enforce design standards and consistency, but no patterns suggesting an attempt to override AI safety filters or exfiltrate system prompts were found.
  • [REMOTE_CODE_EXECUTION]: No remote code execution or suspicious piped commands were found. The skill relies on standard package dependencies and local scripts for its utility functions.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 1, 2026, 04:37 AM