hyperframes-talking-head-recut
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npx hyperframesto download and execute the necessary tools for transcription and video rendering from the npm registry. This is part of the core operational design. - [COMMAND_EXECUTION]: The workflow involves executing local system commands including
ffmpeg,ffprobe,mkdir,cp, andsedto extract audio, gather media metadata, and manage the project directory. - [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes
transcript.jsonfiles (derived from user audio) to guide the agent in generating graphic card designs. This creates an indirect injection surface if the input audio contains malicious instructions intended to influence the agent's code generation. - Ingestion points: Transcript data is ingested from
transcript.jsonin Step 5. - Boundary markers: No specific delimiters or "ignore instructions" warnings are defined for the transcript ingestion phase.
- Capability inventory: The skill has the capability to generate HTML/JavaScript and trigger a local rendering process via
npx hyperframes. - Sanitization: The skill enforces a strict HTML contract (forbidding scripts and external URLs in card fragments) which is validated by a linter in the hyperframes CLI.
- [DYNAMIC_EXECUTION]: The agent dynamically generates GSAP animation code and HTML structures at runtime based on the processed transcript. This code is then saved to local files and executed by a headless browser during the video rendering step.
Audit Metadata