hyperframes-core
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists entirely of markdown documentation, HTML skeletons, and reference guides for the HyperFrames development ecosystem. It defines the technical standards for timing attributes (
data-*), track management, and sub-composition mounting. - [EXTERNAL_DOWNLOADS]: The documentation and examples reference the GSAP animation library from the well-known JSDelivr CDN (
https://cdn.jsdelivr.net/npm/gsap@3.14.2/dist/gsap.min.js). These references are standard for web-based animation frameworks. - [COMMAND_EXECUTION]: The skill instructs the user on how to use the framework's CLI tool (
npx hyperframes) for development tasks such aslint,validate,inspect, andrender. These are standard developer operations for the framework. - [INDIRECT_PROMPT_INJECTION]: The
references/subagent-dispatch.mdfile describes an architecture for multi-agent workflows. It details how to pass context and role instructions to sub-agents. While this defines an attack surface for data to influence sub-agent behavior, the skill provides legitimate orchestration logic and recommends passing context verbatim to preserve instruction integrity rather than providing an exploit vector.
Audit Metadata