hyperframes

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Runtime path: /hyperframes-cli workflow runs render/preview/validate which loads the project’s index.html (and any compositions/*.html via sub-composition data-composition-src), so any outsider-authored text embedded in those HTML files is ingested and rendered.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). Several HTML templates and CLI examples fetch and execute remote JavaScript at runtime (e.g. https://cdn.jsdelivr.net/npm/gsap@3.14.2/dist/gsap.min.js and https://cdn.jsdelivr.net/npm/three@0.147.0/build/three.min.js), and the registry manifest is pulled at runtime (curl https://raw.githubusercontent.com/heygen-com/hyperframes/main/registry/registry.json), so these URLs are used during skill runtime to load and execute external code or control install behavior.