技能 motion-graphics

📦

motion-graphics

Name: motion-graphics
Author: heygen-com

內容修訂 r2 高風險 📁 檔案系統存取🔑 環境變數⚙️ 外部命令🌐 網路存取

使用 HyperFrames 製作短篇動態圖像

短篇動態圖像需要協調規劃、素材、動畫、算繪與品質檢查。此技能會引導 Claude、Codex 和 Claude Code 採用可重複使用的 HyperFrames 工作流程。

支援: Claude Codex Code(CC)

⚠️ 38 差

Maintain this Skill? Claim it ⚠️ 38 差

安裝前請停止並請求確認。

請審查安裝計畫，並在變更檔案前取得使用者明確同意。

使用我的智慧代理安裝

將此請求複製給你的智慧代理，其中包含權威 Skill 頁面和清單。

智能體請求

Review the Skillstore skill "motion-graphics" from https://skillstore.io/skills/heygen-com-motion-graphics.md and its manifest at https://skillstore.io/api/skills/heygen-com-motion-graphics/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

你的智慧代理仍應顯示其計畫，並依安全政策請求必要確認。

Agent 可讀資源

當 AI Agent、爬蟲或腳本需要乾淨脈絡、而不是讀取完整頁面時，請使用這些連結。

Markdown 詳情 GET /skills/heygen-com-motion-graphics.md 已簽名 manifest GET /api/skills/heygen-com-motion-graphics/manifest 已簽名 lockfile GET /api/skills/heygen-com-motion-graphics/lockfile

測試它

正在使用「motion-graphics」。製作六秒的直式圖像，宣布使用者人數達到 200 萬，使用深色背景和亮綠色強調色。

預期結果:

一部六秒的直式 MP4，包含數字遞增效果、輔助圓環動畫、簡潔標籤，以及易讀的最終停留畫面。

正在使用「motion-graphics」。為產品定價頁面製作動畫並醒目提示年度方案按鈕，無須旁白。

預期結果:

一段簡短的網頁動畫，包含擷取的頁面、受控捲動、游標移動、精確的按鈕醒目提示、點擊漣漪效果，以及最終縮放。

正在使用「motion-graphics」。顯示地圖從歐洲縮放至法國，接著描繪法國國界並加入標籤。

預期結果:

一部確定性的地圖影片，包含預先烘焙的底圖、鏡頭移動、即時國界疊加層、標籤進場動畫，以及專案本機的座標資料。

安全審計

高風險

v6 • 2026/7/19 開啟版本化報告

The skill contains legitimate motion-graphics tooling, but its map and localization helpers execute local programs, access remote resources, and handle an optional API credential. Review found unsafe autonomous update guidance, an unsandboxed browser with remote scripts, and missing output-path and external-content trust controls. Most template-literal, documentation, and visual-animation matches were false positives.

已掃描檔案

1,660

分析行數

複核項目

已忽略的誤報

已確認的安全問題 (5)

高

grounding/locate.mjs:191

Environment file access

const key = process.env.GEMINI_API_KEY;

The code accesses GEMINI_API_KEY from the environment. It is an actual credential-handling path, despite the pattern name.

高

categories/maps/bake-basemap.mjs:117-119 categories/maps/bake-basemap.mjs:184-196

Unsandboxed browser executes remote content

The map baker disables the Chrome sandbox and loads JavaScript and map resources from remote endpoints. A compromised remote dependency or browser exploit could affect the host build environment.

The source explicitly loads remote scripts and passes --no-sandbox to Puppeteer. These controls combine into a clear host-isolation risk.

高

SKILL.md:22-24 SKILL.md:107-122

External content prompt injection exposure

The autonomous workflow sources external assets and includes resolved asset information in subagent context without an explicit rule that fetched content is untrusted data. Malicious webpages or assets can contain instruction-like content.

The workflow is autonomous and forwards resolved external assets to subagents. The reviewed instructions do not establish a content trust boundary.

中

categories/maps/bake-basemap.mjs:61 categories/maps/bake-basemap.mjs:111-113 categories/maps/bake-basemap.mjs:227-257

Output path traversal through environment name

The map baker uses the unvalidated NAME environment value to form frame directories and output filenames. A value containing path separators can escape the intended output directory.

NAME is directly concatenated into paths without basename validation or containment checks.

中

SKILL.md:14 SKILL.md:90

Unattended remote package update

The skill directs the agent to run a silent npx update before work begins, allowing remotely fetched package code to change the installed skill without confirmation.

The instructions explicitly say to update silently and describe global updates from GitHub.

能力複核項目 (23)

這些是真實的本機能力，對此技能而言可能是預期行為，因此需要複核，但不會按已確認的惡意行為計分。

高

categories/maps/bake-basemap.mjs:25

Node.js child_process module

import { spawnSync } from "node:child_process";

The helper launches a local browser process to render map frames. It is a real execution capability and the launched browser later disables its sandbox.

高

categories/maps/bake-basemap.mjs:229

Synchronous spawn

const ff = spawnSync(

The helper runs ffmpeg with filesystem-derived output paths and overwrite enabled. This is a real process-execution capability.

高

grounding/locate.mjs:23

Node.js child_process module

import { execFileSync } from "node:child_process";

The localizer invokes external media tools. Although it uses argument arrays, it is a real local command-execution capability.

高

grounding/locate.mjs:35

Synchronous file execution

execFileSync("ffmpeg", ["-v", "error", "-y", ...args], {

The localizer executes ffmpeg to transform caller-supplied image files. This is intentional but requires trusted inputs and a controlled environment.

高

grounding/locate.mjs:39

Synchronous file execution

const out = execFileSync("ffprobe", [

The localizer executes ffprobe on caller-supplied image files. This is intentional but is a real external execution capability.

高

grounding/locate.mjs:199

Synchronous file execution

const b64 = execFileSync("base64", ["-i", img]).toString().replace(/\n/g, "");

The optional detector path executes base64 on the selected image before upload. This is a real command execution capability.

高

grounding/locate.mjs:191

Generic API/secret keys

const key = process.env.GEMINI_API_KEY;

The optional detector reads GEMINI_API_KEY and transmits it to a remote API endpoint.

高

grounding/locate.mjs:194

Generic API/secret keys

"auto needs GEMINI_API_KEY; use the grid loop instead (overlay→region→final→mark)",

The documentation and error message expose that the optional auto mode requires GEMINI_API_KEY.

高

grounding/PROTOCOL.md:19

Generic API/secret keys

1. **A strong detector is available** (e.g. `GEMINI_API_KEY` in env) →

The protocol directs use of an environment API key for the optional detector path.

中

categories/maps/bake-basemap.mjs:257

Synchronous file operations

writeFileSync(join(OUT, NAME + "-coords.json"), JSON.stringify(coords));

The helper writes a coordinate JSON artifact using an environment-controlled output name. Unvalidated path components can affect the write destination.

中

SKILL.md:14

Ruby/shell backtick execution

> **First, keep this skill fresh — run silently, don't ask:** `npx hyperframes skills update motion-

The workflow instructs an unattended npx skill update before use. This can execute newly fetched package code without user confirmation.

低

categories/maps/bake-basemap.mjs:153

Fetch API call

fetch("https://cdn.jsdelivr.net/npm/world-atlas@2.0.2/countries-110m.json").then(function(r){return

The generated browser page fetches remote geographic data at runtime. This creates a network and third-party content trust boundary.

低

categories/maps/bake-basemap.mjs:106

Hardcoded URL

"https://server.arcgisonline.com/ArcGIS/rest/services/World_Imagery/MapServer/tile/{z}/{y}/{x}",