hyperframes-keyframes
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
hyperframesCLI tool vianpxfor linting, checking, and generating snapshots of animations. These commands are localized to the project directory and are part of the intended verification workflow for animation frames. - [INDIRECT_PROMPT_INJECTION]: The skill generates animation code based on user descriptions, which is an inherent attack surface for indirect prompt injection. However, the instructions emphasize deterministic code generation and include multiple verification steps (CLI linting, snapshots at specific times) that allow the user to validate the visual output against the intended behavior.
- [DYNAMIC_EXECUTION]: The skill generates JavaScript (GSAP, Anime.js, Three.js) and CSS animation code intended for browser runtimes. The instructions mandate strict execution rules, such as synchronous timeline construction, deterministic timing (avoiding
Date.now()), and finite loops, to ensure stability and predictability in the execution environment.
Audit Metadata