Skills hyperframes-core
📦

hyperframes-core

Content revision r2 Medium Risk 📁 Filesystem access🌐 Network access⚙️ External commands

Build deterministic HyperFrames video compositions

Video composition work can fail when timing, media, and layout rules conflict. This skill provides a clear HTML contract for building and validating predictable HyperFrames projects.

Supports: Claude Codex Code(CC)
📊 67 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "hyperframes-core" from https://skillstore.io/skills/heygen-com-hyperframes-core.md and its manifest at https://skillstore.io/api/skills/heygen-com-hyperframes-core/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/heygen-com-hyperframes-core.md Signed manifest GET /api/skills/heygen-com-hyperframes-core/manifest Signed lockfile GET /api/skills/heygen-com-hyperframes-core/lockfile

Test it

Using "hyperframes-core". Create a 15-second product introduction with two scenes.

Expected outcome:

  • A standalone or modular structure recommendation.
  • Timed scene boundaries and track assignments.
  • A checklist for timeline, media, and layout requirements.

Using "hyperframes-core". Review a composition that contains a video inside a sub-composition.

Expected outcome:

  • The video must move to a direct child of the host root.
  • The scene template should retain only its visual frame and overlays.
  • Host timeline timing must use the scene start plus local offset.

Security Audit

Medium Risk
v8 • 7/19/2026 Open versioned report

Two CDN script examples load executable third-party code without integrity protection, so they are confirmed low-severity supply-chain risks. The documented npx validation commands are a separate medium-severity package-execution risk when the CLI is absent. The remaining static findings are false positives caused by Markdown code delimiters, CSS or JavaScript syntax, benign local checks, and ordinary documentation terms.

17
Files scanned
1,637
Lines analyzed
2
Review items
0
False positives ignored

Confirmed security concerns (1)

Medium
SKILL.md:78-81
Unpinned npx Package Execution
Validation instructions use npx commands. If the CLI is not installed, npx can download and execute a registry package, creating a supply-chain dependency.
The instructions explicitly invoke four npx hyperframes commands. npx can resolve and execute packages when a local binary is unavailable.
Capability review items (2)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Low
references/composition-patterns.md:46
Hardcoded URL
<script src="https://cdn.jsdelivr.net/npm/gsap@3.14.2/dist/gsap.min.js"></script>
The example loads executable GSAP code from a public CDN without an integrity attribute. This creates a third-party network and supply-chain dependency in generated compositions.
Low
references/minimal-composition.md:12
Hardcoded URL
<script src="https://cdn.jsdelivr.net/npm/gsap@3.14.2/dist/gsap.min.js"></script>
The example loads executable GSAP code from a public CDN without an integrity attribute. This creates a third-party network and supply-chain dependency in generated compositions.

Risk Factors

📁 Filesystem access (3)
references/brief-contract.md:78 references/composition-patterns.md:256 references/subagent-dispatch.md:34
🌐 Network access (2)
references/composition-patterns.md:46 references/minimal-composition.md:12
⚙️ External commands (43)
references/sub-compositions.md:196-197 references/tailwind.md:81-82 SKILL.md:3 SKILL.md:8 SKILL.md:10 SKILL.md:16 SKILL.md:17 SKILL.md:18 SKILL.md:19 SKILL.md:20 SKILL.md:21 SKILL.md:22 SKILL.md:23 SKILL.md:24 SKILL.md:25 SKILL.md:26 SKILL.md:27 SKILL.md:28 SKILL.md:29 SKILL.md:30 SKILL.md:31 SKILL.md:33 SKILL.md:39 SKILL.md:40 SKILL.md:42 SKILL.md:43 SKILL.md:45 SKILL.md:49 SKILL.md:53 SKILL.md:59 SKILL.md:60 SKILL.md:61 SKILL.md:62 SKILL.md:63 SKILL.md:64 SKILL.md:70 SKILL.md:71 SKILL.md:72 SKILL.md:76 SKILL.md:78 SKILL.md:79 SKILL.md:80 SKILL.md:81
Audited by: claude View Audit History →
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/heygen-com-hyperframes-core/audits/8?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/heygen-com-hyperframes-core/security.svg)](https://skillstore.io/skills/heygen-com-hyperframes-core?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/heygen-com-hyperframes-core?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/heygen-com-hyperframes-core/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/heygen-com-hyperframes-core.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA · BibTeX · CFF)

APA citation

heygen-com. (2026). hyperframes-core security audit report (audit version 8) [Author version unspecified]. Skillstore. https://skillstore.io/skills/heygen-com-hyperframes-core/audits/8

BibTeX citation

@techreport{heygen-com-heygen-com-hyperframes-core-2026, author = {heygen-com}, title = {hyperframes-core security audit report (audit version 8)}, institution = {Skillstore}, year = {2026}, number = {8}, url = {https://skillstore.io/skills/heygen-com-hyperframes-core/audits/8}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "hyperframes-core security audit report (audit version 8)" version: "unspecified" type: report authors: - name: "heygen-com" date-released: "2026-07-19" url: "https://skillstore.io/skills/heygen-com-hyperframes-core/audits/8" identifiers: - type: other value: "skillstore:heygen-com-hyperframes-core:audit:8" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: High
45
Architecture
85
Maintainability
87
Content
67
Community
83
Spec Compliance

What You Can Build

Create a first composition

Start a small HTML video composition with a sized root, clips, and one paused timeline.

Organize a multi-scene video

Split a multi-scene project into sub-compositions with consistent IDs and track timing.

Review an existing project

Check media placement, deterministic animation, and validation steps before a render.

Try These Prompts

Start a simple composition 
Create a minimal HyperFrames composition for a 10-second product title card. Explain each required timing attribute.
Add a timed scene 
Add a new six-second clip to my existing HyperFrames composition. Preserve current IDs, tracks, and media paths.
Build modular scenes 
Design a modular HyperFrames project with three sequential scenes and continuous root audio. Include the required sub-composition wiring.
Audit rendering readiness 
Review this HyperFrames project against the composition contract. Identify deterministic rendering, layout, media, and timeline issues before rendering.

Best Practices

  • Read the relevant reference before changing composition structure or media.
  • Use one paused timeline per composition and keep timeline keys equal to composition IDs.
  • Run checks and inspect snapshots before requesting an approved render.

Avoid

  • Do not put video or audio inside a sub-composition template.
  • Do not use clocks, unseeded randomness, network input, or infinite repeats during rendering.
  • Do not change unrelated timing, IDs, variables, or media paths in an existing project.

Frequently Asked Questions

What does this skill help create?
It helps create deterministic HyperFrames video compositions from HTML.
When should I use a modular project?
Use modular structure when a video has clear scene cuts, reusable scenes, or large scene markup.
Can a sub-composition contain video or audio?
No. Video and audio must be direct children of the host root.
Why must the timeline be paused?
A paused timeline lets the renderer seek to each exact frame deterministically.
Does this skill create media assets?
No. It defines composition structure and media placement, not asset creation.
When should I render the project?
Render only after checks pass, snapshots are reviewed, and the user approves the output.

Developer Details

Author

heygen-com

License

MIT

Skillstore revision

r2

Version notice

The author did not declare a version.

Repository

https://github.com/heygen-com/hyperframes/tree/main/skills/hyperframes-core/

Ref

77d0e66fbadeb1f5d1e6a5aada7861240b8ed2d7

Maintenance freshness

7/19/2026

Usage

1 downloads · 0 views

File structure

📁 references/

📄 brief-contract.md

📄 brief-format.md

📄 composition-patterns.md

📄 data-attributes.md

📄 determinism-rules.md

📄 full-screen-motion.md

📄 minimal-composition.md

📄 production-loop.md

📄 review-loop.md

📄 script-format.md

📄 storyboard-format.md

📄 sub-compositions.md

📄 subagent-dispatch.md

📄 tailwind.md

📄 tracks-and-clips.md

📄 variables-and-media.md

📄 SKILL.md