title-design
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Downloads and executes the
hyperframesrendering tool usingnpxduring the build and render process. - Evidence:
examples/demo/package.jsonandexamples/demo/README.mdreferencehyperframes@0.8.206. - Source: The tool's registry is configured to point to HeyGen's official GitHub repository in
examples/demo/hyperframes.json. - [EXTERNAL_DOWNLOADS]: Loads the GSAP (GreenSock Animation Platform) library from the jsDelivr CDN for animation logic in the demo.
- Evidence:
examples/demo/index.htmlincludes a script tag forhttps://cdn.jsdelivr.net/npm/gsap@3.14.2/dist/gsap.min.js. - [INDIRECT_PROMPT_INJECTION]: The skill accepts user-provided text (names, titles, locations) to populate the video templates, which is a common surface for indirect prompt injection.
- Ingestion points: User inputs for template parameters like
name,role, andtextin various JSON and Markdown files. - Boundary markers: The skill instructions emphasize using real credentials and provide strict formatting formulas in
SKILL.md. - Capability inventory: Executes subprocess calls to
npx hyperframesto render video files as described inexamples/demo/README.md. - Sanitization: User-provided text is interpolated into HTML/CSS templates for rendering, with no explicit sanitization scripts present in the provided files.
Audit Metadata