hyperframes
Warn
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: MEDIUMREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The script
scripts/package-loader.mjsimplements a dynamic package loader that uses theimport()function to execute code from Node.js modules downloaded at runtime to temporary directories. - [EXTERNAL_DOWNLOADS]: The skill performs automated downloads of software dependencies from the npm registry using
npm installwithin its utility scripts. It also extensively usesnpxto fetch and execute CLI tools for media initialization and rendering. - [COMMAND_EXECUTION]: The skill utilizes system-level command execution through
spawnSyncinscripts/package-loader.mjsfor bootstrapping its own dependencies and re-spawning the execution environment. It also executes various tasks usingnpxandnodein its standard workflow. - [PROMPT_INJECTION]: The skill ingests untrusted external data in the form of audio files and transcripts to generate video overlays, representing an indirect prompt injection surface.
- Ingestion points: Audio and transcript data processed in
SKILL.mdandreferences/transcript-guide.md. - Boundary markers: No explicit delimiters or instructions to ignore embedded content are provided for the processed media data.
- Capability inventory: Presence of
spawnSyncfor system commands andnpxfor remote tool execution. - Sanitization: The skill does not document explicit validation or sanitization routines for external transcript content.
Audit Metadata