hyperframes-registry
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches registry manifests and component source files (HTML, CSS, JS) from the official HeyGen GitHub repository (
heygen-com/hyperframes). These downloads are used to search the catalog and install visual assets into local projects. - [COMMAND_EXECUTION]: Utilizes the
hyperframesCLI tool throughnpxto perform search operations (catalog), install assets (add), and validate project structure (lint,check). It also facilitates a feedback loop (feedback) that transmits registry search misses back to the vendor for improvement. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: Processes component names, descriptions, and tags from
registry.jsonandregistry-item.jsonfiles during the discovery phase (SKILL.md, discovery.md). - Boundary markers: Absent. The instructions do not provide delimiters or warnings for the agent to disregard instructions that might be embedded within registry metadata.
- Capability inventory: The skill can write files to the filesystem (
hyperframes add), execute shell commands, and perform network requests for telemetry and registry fetching. - Sanitization: No sanitization or validation of the registry metadata content is described before it is used to influence the agent's selection of components.
- [DYNAMIC_EXECUTION]: Guides the implementation of GSAP timelines and Three.js rendering scripts that are executed within the HyperFrames runtime environment. The skill specifically mandates deterministic coding practices, such as using seeded random number generators and avoiding
requestAnimationFrame, to ensure consistent performance during runtime execution (contributing.md, templates.md).
Audit Metadata