hyperframes
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npxto download and run thehyperframesCLI tool from the npm registry. It also provides instructions for installing a Claude Code plugin from theheygen-comorganization. These are official resources for the framework described and originate from legitimate repositories. - [COMMAND_EXECUTION]: The skill provides a suite of CLI commands for the
hyperframesutility, includinginit,preview,render,lint,snapshot,check, andtimeline. These are used for managing video composition projects and rendering them into MP4 files using local system resources like Node.js and FFmpeg. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The skill processes HTML, CSS, and JavaScript (GSAP) files within the
compositions/directory of a project. - Boundary markers: No specific delimiters or warnings are mentioned for the code content processed by the framework.
- Capability inventory: The skill allows command execution via the CLI and file writing to the local system during rendering and snapshotting.
- Sanitization: Content is rendered in a headless browser environment to generate video frames; the skill does not specify sanitization for the input HTML/JS, which is a standard surface for tools of this type.
Audit Metadata