hyperframes-creative

Warn

Audited by Gen Agent Trust Hub on Sep 10, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/extract-audio-data.py executes the ffmpeg utility via subprocess.run to process audio files. Additionally, references/design-picker.md instructs the agent to run a local HTTP server using python3 -m http.server and execute curl commands to verify the server's status.
  • [EXTERNAL_DOWNLOADS]: The scripts/package-loader.mjs script is designed to download and install Node.js packages (@hyperframes/producer, @hyperframes/core, and sharp) using npm install into a temporary directory if they are not already present in the local environment.
  • [DYNAMIC_EXECUTION]: The scripts/package-loader.mjs script dynamically imports Node.js modules from computed file paths within a temporary directory created during the bootstrap process. It also uses spawnSync to re-execute the calling process with a modified environment to include the downloaded modules.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 10, 2026, 09:48 PM