hyperframes

Pass

Audited by Gen Agent Trust Hub on Oct 27, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill uses npx to download and run the hyperframes CLI tool from the npm registry. It also provides instructions for installing a Claude Code plugin from the heygen-com organization. These are official resources for the framework described and originate from legitimate repositories.
  • [COMMAND_EXECUTION]: The skill provides a suite of CLI commands for the hyperframes utility, including init, preview, render, lint, snapshot, check, and timeline. These are used for managing video composition projects and rendering them into MP4 files using local system resources like Node.js and FFmpeg.
  • [INDIRECT_PROMPT_INJECTION]:
  • Ingestion points: The skill processes HTML, CSS, and JavaScript (GSAP) files within the compositions/ directory of a project.
  • Boundary markers: No specific delimiters or warnings are mentioned for the code content processed by the framework.
  • Capability inventory: The skill allows command execution via the CLI and file writing to the local system during rendering and snapshotting.
  • Sanitization: Content is rendered in a headless browser environment to generate video frames; the skill does not specify sanitization for the input HTML/JS, which is a standard surface for tools of this type.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 27, 2026, 10:23 AM