hyperframes-keyframes
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
npx hyperframesto execute linting, checking, and diagnostic commands for generated animation code. - [DYNAMIC_EXECUTION]: The agent is instructed to generate JavaScript (GSAP, Anime.js, Three.js) and CSS keyframe animations, which are intended to be executed in a browser environment.
- [INDIRECT_PROMPT_INJECTION]: The skill creates a surface for indirect prompt injection by generating code and CLI commands based on user-provided descriptions.
- Ingestion points: User requests for animation sequences described in
SKILL.mdandreferences/keyframe-patterns.md. - Boundary markers: No explicit delimiters or warnings to ignore instructions embedded in the user data are provided in the prompts.
- Capability inventory: Execution of
npxcommands and generation of executable JavaScript/CSS inSKILL.md. - Sanitization: No specific sanitization or validation logic is defined for parameters like selectors or filenames passed to the CLI tools.
- [EXTERNAL_DOWNLOADS]: Contains references to official documentation for GSAP, Anime.js, Three.js, and MDN for implementation guidance.
Audit Metadata