website-to-hyperframes
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a series of
npx hyperframescommands to handle core tasks such as site capture, text-to-speech generation, transcription, linting, and final rendering. These are standard operations within the HyperFrames development ecosystem. - [EXTERNAL_DOWNLOADS]: The skill references reputable external resources, including the GSAP animation library and the Lottie player component, both hosted on the well-known jsdelivr CDN.
- [PROMPT_INJECTION]: As the skill ingests and processes content from user-provided URLs to generate scripts and visuals, it is susceptible to indirect prompt injection. However, this is an inherent risk of the skill's primary function (website summarization and adaptation) rather than a malicious implementation.
- [CREDENTIALS_UNSAFE]: The documentation correctly advises users to manage sensitive API keys (e.g., Gemini or Google API keys) using a
.envfile at the repository root, which is a recognized best practice for secret management.
Audit Metadata