hyperframes-product-launch-video
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests external website content through the
capturephase to inform the video script and storyboard. This presents a potential surface for indirect prompt injection where web content could attempt to influence the agent's instructions. However, the skill mitigates this by using structured data formats and enforcing a strict review loop with the user. - [COMMAND_EXECUTION]: The skill utilizes
ffmpegandffprobefor media processing tasks, such as ensuring audio covers the full video duration. These are standard, well-known utilities for media workflows. - [DYNAMIC_EXECUTION]: The skill dynamically generates HTML compositions and GSAP animation timelines to build the final video output. It also orchestrates sub-agents to process individual frames, following a documented frame-worker contract.
- [EXTERNAL_DOWNLOADS]: The skill loads the GSAP animation library from the JSDelivr CDN and uses the
npxpackage runner to maintain its components. All external references are to well-known service providers or official ecosystem tools.
Audit Metadata