hyperframes-keyframes
Pass
Audited by Gen Agent Trust Hub on Oct 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references several well-known and trusted external resources for animation documentation, including GSAP, Anime.js, Mozilla Developer Network (MDN), and Three.js. These are standard industry references and do not represent a security risk.
- [COMMAND_EXECUTION]: The skill documents the use of
npx hyperframes, a local CLI tool designed for linting and verifying animation keyframes. These commands are executed locally within the developer's environment for diagnostics (e.g.,hyperframes check,hyperframes keyframes . --shot). - [SAFE]: The skill implements strict runtime rules to ensure security and predictability, such as requiring paused timelines, deterministic delays, and explicitly forbidding the use of non-deterministic functions like
Math.random()orDate.now()for render-critical motion. It also encourages standard practices like registering timelines on thewindowobject for host access.
Audit Metadata