hyperframes-animation
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The script
scripts/package-loader.mjsprovides a self-bootstrapping mechanism that installs missing Node.js dependencies (specifically@hyperframes/producerand@hyperframes/core) from the npm registry. It utilizesnpm installwith the--ignore-scriptsflag to mitigate the risk of malicious package lifecycle scripts and then dynamically loads the modules viaimport()for use in the animation auditing process. - [DYNAMIC_EXECUTION]: The auditing script
scripts/animation-map.mjsexecutes JavaScript within a headless browser environment using thepage.evaluatemethod. This capability is used to programmatically seek through animation timelines and measure the layout geometry (bounding boxes) of DOM elements to generate a comprehensive animation map for the user. - [EXTERNAL_DOWNLOADS]: Reference documentation and implementation examples within the skill point to various third-party animation libraries (such as GSAP, Three.js, and Anime.js) hosted on established Content Delivery Networks including
cdn.jsdelivr.net,cdnjs.cloudflare.com, andunpkg.com.
Audit Metadata