hyperframes-core
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates project validation and asset processing by instructing the agent to execute local Node.js scripts, such as
scripts/check-spatial-canvas.cjsfor spatial integrity andscripts/tts-fish.mjsfor narration synthesis. It also leverages thehyperframes-clithroughnpxfor linting, snapshotting, and final video rendering. - [INDIRECT_PROMPT_INJECTION]: The skill architecture includes ingestion points for user-authored planning files, specifically
STORYBOARD.mdandSCRIPT.md. Furthermore, it documents a subagent dispatch mechanism (DISPATCH) that propagates context to child agents. While these represent surfaces for indirect instructions, the skill defines strict technical contracts and schemas to mitigate accidental behavior overrides. - [EXTERNAL_DOWNLOADS]: The skill references production-standard libraries including GSAP and the Tailwind CSS browser runtime from well-known content delivery networks (e.g., jsdelivr.net). These references are intended for inclusion in the generated HTML compositions rather than direct execution in the agent's host environment.
Audit Metadata