hyperframes-animation

Pass

Audited by Gen Agent Trust Hub on Sep 10, 2026

Risk Level: SAFEREMOTE_CODE_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The script scripts/package-loader.mjs provides a self-bootstrapping mechanism that installs missing Node.js dependencies (specifically @hyperframes/producer and @hyperframes/core) from the npm registry. It utilizes npm install with the --ignore-scripts flag to mitigate the risk of malicious package lifecycle scripts and then dynamically loads the modules via import() for use in the animation auditing process.
  • [DYNAMIC_EXECUTION]: The auditing script scripts/animation-map.mjs executes JavaScript within a headless browser environment using the page.evaluate method. This capability is used to programmatically seek through animation timelines and measure the layout geometry (bounding boxes) of DOM elements to generate a comprehensive animation map for the user.
  • [EXTERNAL_DOWNLOADS]: Reference documentation and implementation examples within the skill point to various third-party animation libraries (such as GSAP, Three.js, and Anime.js) hosted on established Content Delivery Networks including cdn.jsdelivr.net, cdnjs.cloudflare.com, and unpkg.com.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 10, 2026, 09:48 PM