hyperframes-keyframes

Pass

Audited by Gen Agent Trust Hub on Oct 19, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references several well-known and trusted external resources for animation documentation, including GSAP, Anime.js, Mozilla Developer Network (MDN), and Three.js. These are standard industry references and do not represent a security risk.
  • [COMMAND_EXECUTION]: The skill documents the use of npx hyperframes, a local CLI tool designed for linting and verifying animation keyframes. These commands are executed locally within the developer's environment for diagnostics (e.g., hyperframes check, hyperframes keyframes . --shot).
  • [SAFE]: The skill implements strict runtime rules to ensure security and predictability, such as requiring paused timelines, deterministic delays, and explicitly forbidding the use of non-deterministic functions like Math.random() or Date.now() for render-critical motion. It also encourages standard practices like registering timelines on the window object for host access.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 19, 2026, 06:55 PM