hyperframes-music-to-video
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses ffmpeg via Python's subprocess module to decode music files into waveform data for analysis. It also relies on a set of HyperFrames CLI tools (npx hyperframes) for project initialization and rendering. These commands are restricted to necessary media processing and development workflows.
- [EXTERNAL_DOWNLOADS]: The skill instructions suggest installing well-known audio processing libraries (librosa, numpy, soundfile) via pip. Additionally, the HTML composition templates reference standard, industry-recognized JavaScript animation libraries like GSAP and Three.js from public CDNs.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied SVG content for icons. To prevent DOM-based XSS, it implements a comprehensive sanitizer in the intro-kinetic-cascade template that strips any executable scripts or event handlers, allowing only safe geometric elements and presentation attributes.
Audit Metadata