hyperframes-core

Pass

Audited by Gen Agent Trust Hub on Oct 26, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill consists entirely of markdown documentation, HTML skeletons, and reference guides for the HyperFrames development ecosystem. It defines the technical standards for timing attributes (data-*), track management, and sub-composition mounting.
  • [EXTERNAL_DOWNLOADS]: The documentation and examples reference the GSAP animation library from the well-known JSDelivr CDN (https://cdn.jsdelivr.net/npm/gsap@3.14.2/dist/gsap.min.js). These references are standard for web-based animation frameworks.
  • [COMMAND_EXECUTION]: The skill instructs the user on how to use the framework's CLI tool (npx hyperframes) for development tasks such as lint, validate, inspect, and render. These are standard developer operations for the framework.
  • [INDIRECT_PROMPT_INJECTION]: The references/subagent-dispatch.md file describes an architecture for multi-agent workflows. It details how to pass context and role instructions to sub-agents. While this defines an attack surface for data to influence sub-agent behavior, the skill provides legitimate orchestration logic and recommends passing context verbatim to preserve instruction integrity rather than providing an exploit vector.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 26, 2026, 06:31 PM