hyperframes-cli
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The skill manages credentials in standard locations such as
~/.heygen/credentialsand~/.aws/credentialsfor authenticating cloud rendering and infrastructure deployment. Thefeedbackcommand transmits diagnostic reports to an external channel; the skill documentation mandates the redaction of absolute paths, machine identifiers, and secrets before submission. - [EXTERNAL_DOWNLOADS]: Fetches pinned Chromium binaries, machine learning models for transcription (Whisper) and text-to-speech, and configuration files from the vendor's official GitHub repositories and domains.
- [INDIRECT_PROMPT_INJECTION]: The
capturecommand ingests content from external URLs to generate project scaffolds (Ingestion:references/init-and-scaffold.md). The tool generates aBLOCKED.mdfile to identify restricted content (Boundaries: present). The skill maintains high capabilities including file writing and cloud deployment (Capabilities:render,publish,lambda deploy). Documentation provides warnings against using data from failed captures (Sanitization: present). - [COMMAND_EXECUTION]: Orchestrates various development and deployment tasks by executing shell commands via
npxand integrating with system tools likedocker,terraform,gcloud, andaws-sam.
Audit Metadata