hyperframes
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches structural registry information from HeyGen's official public repository on GitHub (
raw.githubusercontent.com/heygen-com/hyperframes/main/registry) to manage reusable video components. - [REMOTE_CODE_EXECUTION]: Uses the
npxcommand to download and execute thehyperframesrendering engine at a specific, verified version (0.7.17) from the npm registry. This is the primary method for generating video frames and previews. - [COMMAND_EXECUTION]: Orchestrates various local CLI tools for media production, including
ffmpegandffprobefor audio mastering and analysis, andgitfor maintaining project state. All system calls are handled through process spawning methods that prevent shell injection, including a strict whitelist for arguments on Windows platforms.
Audit Metadata