技能 motion-graphics

📦

motion-graphics

Name: motion-graphics
Author: heygen-com

内容修订 r2 高风险 📁 文件系统访问🔑 环境变量⚙️ 外部命令🌐 网络访问

使用 HyperFrames 创建短篇动态图形

短篇动态图形的制作需要协调规划、素材、动画、渲染和质量检查。此技能可指导 Claude、Codex 和 Claude Code 使用可复用的 HyperFrames 工作流完成制作。

支持: Claude Codex Code(CC)

⚠️ 38 差

安装前请停下并请求确认。

请审查安装计划，并在更改文件前获得用户明确同意。

使用我的智能体安装

将此请求复制给你的智能体，其中包含权威 Skill 页面和清单。

智能体请求

Review the Skillstore skill "motion-graphics" from https://skillstore.io/skills/heygen-com-motion-graphics.md and its manifest at https://skillstore.io/api/skills/heygen-com-motion-graphics/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

你的智能体仍应展示其计划，并按安全策略请求必要确认。

Agent 可读资源

当 AI Agent、爬虫或脚本需要干净上下文，而不是读取完整页面时，请使用这些链接。

Markdown 详情 GET /skills/heygen-com-motion-graphics.md 已签名 manifest GET /api/skills/heygen-com-motion-graphics/manifest 已签名 lockfile GET /api/skills/heygen-com-motion-graphics/lockfile

测试它

正在使用“motion-graphics”。创建一个六秒的竖版图形，宣布用户数达到 200 万，使用深色背景和亮绿色强调色。

预期结果:

一个六秒的竖版 MP4，包含数字递增、辅助圆环动画、克制的标签，以及易于阅读的最终画面停留。

正在使用“motion-graphics”。为产品定价页面制作动画，并在没有旁白的情况下突出显示年度方案按钮。

预期结果:

一个简短的网页动画，包含捕获的页面、受控滚动、光标移动、精确的按钮高亮、点击波纹和最终缩放。

正在使用“motion-graphics”。展示地图从欧洲缩放至法国，然后绘制法国边界并添加标签。

预期结果:

一个确定性的地图视频，包含预先烘焙的底图、镜头移动、实时边界叠加层、标签入场动画和项目本地坐标数据。

安全审计

高风险

v6 • 2026/7/19 打开版本化报告

The skill contains legitimate motion-graphics tooling, but its map and localization helpers execute local programs, access remote resources, and handle an optional API credential. Review found unsafe autonomous update guidance, an unsandboxed browser with remote scripts, and missing output-path and external-content trust controls. Most template-literal, documentation, and visual-animation matches were false positives.

已扫描文件

1,660

分析行数

复核项

已忽略误报

已确认安全问题 (5)

高

grounding/locate.mjs:191

Environment file access

const key = process.env.GEMINI_API_KEY;

The code accesses GEMINI_API_KEY from the environment. It is an actual credential-handling path, despite the pattern name.

高

categories/maps/bake-basemap.mjs:117-119 categories/maps/bake-basemap.mjs:184-196

Unsandboxed browser executes remote content

The map baker disables the Chrome sandbox and loads JavaScript and map resources from remote endpoints. A compromised remote dependency or browser exploit could affect the host build environment.

The source explicitly loads remote scripts and passes --no-sandbox to Puppeteer. These controls combine into a clear host-isolation risk.

高

SKILL.md:22-24 SKILL.md:107-122

External content prompt injection exposure

The autonomous workflow sources external assets and includes resolved asset information in subagent context without an explicit rule that fetched content is untrusted data. Malicious webpages or assets can contain instruction-like content.

The workflow is autonomous and forwards resolved external assets to subagents. The reviewed instructions do not establish a content trust boundary.

中

categories/maps/bake-basemap.mjs:61 categories/maps/bake-basemap.mjs:111-113 categories/maps/bake-basemap.mjs:227-257

Output path traversal through environment name

The map baker uses the unvalidated NAME environment value to form frame directories and output filenames. A value containing path separators can escape the intended output directory.

NAME is directly concatenated into paths without basename validation or containment checks.

中

SKILL.md:14 SKILL.md:90

Unattended remote package update

The skill directs the agent to run a silent npx update before work begins, allowing remotely fetched package code to change the installed skill without confirmation.

The instructions explicitly say to update silently and describe global updates from GitHub.

能力复核项 (23)

这些是真实的本地能力，对此技能可能是预期行为，因此需要复核，但不会按已确认恶意行为计分。

高

categories/maps/bake-basemap.mjs:25

Node.js child_process module

import { spawnSync } from "node:child_process";

The helper launches a local browser process to render map frames. It is a real execution capability and the launched browser later disables its sandbox.

高

categories/maps/bake-basemap.mjs:229

Synchronous spawn

const ff = spawnSync(

The helper runs ffmpeg with filesystem-derived output paths and overwrite enabled. This is a real process-execution capability.

高

grounding/locate.mjs:23

Node.js child_process module

import { execFileSync } from "node:child_process";

The localizer invokes external media tools. Although it uses argument arrays, it is a real local command-execution capability.

高

grounding/locate.mjs:35

Synchronous file execution

execFileSync("ffmpeg", ["-v", "error", "-y", ...args], {

The localizer executes ffmpeg to transform caller-supplied image files. This is intentional but requires trusted inputs and a controlled environment.

高

grounding/locate.mjs:39

Synchronous file execution

const out = execFileSync("ffprobe", [

The localizer executes ffprobe on caller-supplied image files. This is intentional but is a real external execution capability.

高

grounding/locate.mjs:199

Synchronous file execution

const b64 = execFileSync("base64", ["-i", img]).toString().replace(/\n/g, "");

The optional detector path executes base64 on the selected image before upload. This is a real command execution capability.

高

grounding/locate.mjs:191

Generic API/secret keys

const key = process.env.GEMINI_API_KEY;

The optional detector reads GEMINI_API_KEY and transmits it to a remote API endpoint.

高

grounding/locate.mjs:194

Generic API/secret keys

"auto needs GEMINI_API_KEY; use the grid loop instead (overlay→region→final→mark)",

The documentation and error message expose that the optional auto mode requires GEMINI_API_KEY.

高

grounding/PROTOCOL.md:19

Generic API/secret keys

1. **A strong detector is available** (e.g. `GEMINI_API_KEY` in env) →

The protocol directs use of an environment API key for the optional detector path.

中

categories/maps/bake-basemap.mjs:257

Synchronous file operations

writeFileSync(join(OUT, NAME + "-coords.json"), JSON.stringify(coords));

The helper writes a coordinate JSON artifact using an environment-controlled output name. Unvalidated path components can affect the write destination.

中

SKILL.md:14

Ruby/shell backtick execution

> **First, keep this skill fresh — run silently, don't ask:** `npx hyperframes skills update motion-

The workflow instructs an unattended npx skill update before use. This can execute newly fetched package code without user confirmation.

低

categories/maps/bake-basemap.mjs:153

Fetch API call

fetch("https://cdn.jsdelivr.net/npm/world-atlas@2.0.2/countries-110m.json").then(function(r){return

The generated browser page fetches remote geographic data at runtime. This creates a network and third-party content trust boundary.

低

categories/maps/bake-basemap.mjs:106

Hardcoded URL

"https://server.arcgisonline.com/ArcGIS/rest/services/World_Imagery/MapServer/tile/{z}/{y}/{x}",