Skills hyperframes-registry

📦

hyperframes-registry

Name: hyperframes-registry
Author: heygen-com

Content revision r2 Safe 🌐 Network access⚙️ External commands

Install HyperFrames Registry Assets

Adding registry assets can require several files and composition settings. This skill guides discovery, installation, and correct wiring of blocks and components.

Supports: Claude Codex Code(CC)

📊 75 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "hyperframes-registry" from https://skillstore.io/skills/heygen-com-hyperframes-registry.md and its manifest at https://skillstore.io/api/skills/heygen-com-hyperframes-registry/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/heygen-com-hyperframes-registry.md Signed manifest GET /api/skills/heygen-com-hyperframes-registry/manifest Signed lockfile GET /api/skills/heygen-com-hyperframes-registry/lockfile

Test it

Using "hyperframes-registry". How do I add a block to my composition?

Expected outcome:

Run the documented add command for the selected block.
Add a composition element that references the installed HTML file.
Set its composition ID, start time, duration, dimensions, and track index.

Using "hyperframes-registry". Where do registry components install?

Expected outcome:

Components install under compositions/components by default. The paths section in hyperframes.json can change this location.

Using "hyperframes-registry". How should I discover available items?

Expected outcome:

Use the catalog command with type or tag filters. Use JSON output in automated workflows, then explicitly install the chosen name.

Security Audit

Safe

v5 • 7/19/2026 Open versioned report

The reported command-execution and reconnaissance matches are documentation formatting and composition terminology, not executable behavior. Ten explicit remote URLs create low-severity supply-chain or availability dependencies; three schema identifiers are non-network metadata. No prompt injection, credential access, covert exfiltration, or malicious intent was found in the reviewed skill guidance.

Files scanned

1,260

Lines analyzed

Review items

False positives ignored

Capability review items (10)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Low

references/demo-html-pattern.md:22

Hardcoded URL

The template loads a remote third-party resource at runtime. This is a low-severity network and supply-chain dependency, although the URL is explicit and not concealed.

Low

references/discovery.md:24

Hardcoded URL

curl -s https://raw.githubusercontent.com/heygen-com/hyperframes/main/registry/registry.json

The documentation instructs users to retrieve a manifest from a mutable raw GitHub URL. This creates a low-severity integrity and availability dependency on remote content.

Low

references/install-locations.md:24

Hardcoded URL

"registry": "https://raw.githubusercontent.com/heygen-com/hyperframes/main/registry",

The configuration points the registry at a mutable raw GitHub URL. Later installs can retrieve content from that remote source, creating a low-severity supply-chain dependency.

Low

references/templates.md:13

Hardcoded URL

href="https://fonts.googleapis.com/css2?family=Montserrat:wght@800;900&display=swap"

The template loads a remote third-party resource at runtime. This is a low-severity network and supply-chain dependency, although the URL is explicit and not concealed.

Low

references/templates.md:16

Hardcoded URL

The template loads a remote third-party resource at runtime. This is a low-severity network and supply-chain dependency, although the URL is explicit and not concealed.

Low

references/templates.md:191

Hardcoded URL

The template loads a remote third-party resource at runtime. This is a low-severity network and supply-chain dependency, although the URL is explicit and not concealed.

Low

references/templates.md:192

Hardcoded URL

The template loads a remote third-party resource at runtime. This is a low-severity network and supply-chain dependency, although the URL is explicit and not concealed.

Low

references/templates.md:377

Hardcoded URL

The template loads a remote third-party resource at runtime. This is a low-severity network and supply-chain dependency, although the URL is explicit and not concealed.

Low

SKILL.md:36

Hardcoded URL

"registry": "https://raw.githubusercontent.com/heygen-com/hyperframes/main/registry",

The configuration points the registry at a mutable raw GitHub URL. Later installs can retrieve content from that remote source, creating a low-severity supply-chain dependency.

Low

SKILL.md:104

Hardcoded URL

curl -s https://raw.githubusercontent.com/heygen-com/hyperframes/main/registry/registry.json

The documentation instructs users to retrieve a manifest from a mutable raw GitHub URL. This creates a low-severity integrity and availability dependency on remote content.

Risk Factors

🌐 Network access (13)

references/demo-html-pattern.md:22 references/discovery.md:24 references/install-locations.md:23 references/install-locations.md:24 references/templates.md:13 references/templates.md:16 references/templates.md:191 references/templates.md:192 references/templates.md:322 references/templates.md:344 references/templates.md:377 SKILL.md:36 SKILL.md:104

⚙️ External commands (29)

Audited by: claude View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/heygen-com-hyperframes-registry/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/heygen-com-hyperframes-registry/security.svg)](https://skillstore.io/skills/heygen-com-hyperframes-registry?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/heygen-com-hyperframes-registry?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/heygen-com-hyperframes-registry/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/heygen-com-hyperframes-registry.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

heygen-com. (2026). hyperframes-registry security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/heygen-com-hyperframes-registry/audits/5

BibTeX citation

@techreport{heygen-com-heygen-com-hyperframes-registry-2026,
  author = {heygen-com},
  title = {hyperframes-registry security audit report (audit version 5)},
  institution = {Skillstore},
  year = {2026},
  number = {5},
  url = {https://skillstore.io/skills/heygen-com-hyperframes-registry/audits/5},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "hyperframes-registry security audit report (audit version 5)"
version: "unspecified"
type: report
authors:
  - name: "heygen-com"
date-released: "2026-07-19"
url: "https://skillstore.io/skills/heygen-com-hyperframes-registry/audits/5"
identifiers:
  - type: other
    value: "skillstore:heygen-com-hyperframes-registry:audit:5"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: High

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Add a motion graphics block

Find a block, install it, and place it on a composition timeline with the required attributes.

Reuse a visual component

Merge an installed effect snippet into an existing composition without missing its styles or script.

Publish a registry contribution

Follow the documented path from a new item idea through validation and an upstream pull request.

Try These Prompts

Find a block

Show me how to list HyperFrames blocks and find items tagged captions.

Install a component

Help me install the grain-overlay component into my current HyperFrames project. Explain where the file will be placed.

Wire a timeline block

I installed data-chart. Show me how to add it to index.html at 2 seconds on track 1, including its dimensions.

Plan a contribution

Help me plan a new reusable HyperFrames component. Include the registry metadata, validation steps, preview expectations, and pull request preparation.

Best Practices

Use catalog JSON output in automated workflows, then install an explicitly selected item.
Review every installed HTML, CSS, and script snippet before merging it into a production composition.
Pin or verify remote registry and CDN dependencies for reproducible builds.

Avoid

Do not install every item from a broad tag without reviewing the expected files and dependencies.
Do not copy a component script into a composition without checking its integration notes and runtime dependencies.
Do not rely on a mutable remote registry URL for a production release without integrity controls.