hyperframes-general-video
Warn
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: MEDIUMDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [DYNAMIC_EXECUTION]: The skill executes Node.js scripts from paths computed at runtime. For example, it calls
node <MEDIA_DIR>/scripts/prefs.mjsandnode <MEDIA_DIR>/scripts/recipe.mjs, where<MEDIA_DIR>is defined as the directory of a separate installed skill. - [DYNAMIC_EXECUTION]: The skill dynamically constructs worker roles by concatenating instruction files at runtime. The file
scripts/frame-packets.mjsfacilitates the creation of a_role.mdpayload which merges core contracts with skill-specific instructions for sub-agents. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data that could influence the agent's logic or composition output. \n
- Ingestion points: Figma URLs,
BRIEF.md, andSTORYBOARD.mdproject files. \n - Boundary markers: The skill instructs the agent to use specific canonical terms and follow the 'brief contract' to manage checkpoints. \n
- Capability inventory: Shell command execution via
npx, Node.js script execution, file writing, and worker dispatching. \n - Sanitization: The instructions explicitly state that raw Figma connector calls are avoided to ensure SVG sanitization and brand token binding.
- [EXTERNAL_DOWNLOADS]: The skill makes extensive use of
npxto execute thehyperframesCLI for skill updates, project initialization, and build validation. These downloads originate from the vendor's ecosystem (HeyGen, Inc.).
Audit Metadata