Announcing Beacon: Self-improving memory for coding agents
BeaconIntel
2.9K
← All skills
Skill

hyperframes-cli

skill:openai/plugins#hyperframes-cli

HyperFrames CLI tool — hyperframes init, lint, inspect, preview, render, transcribe, tts, doctor, browser, info, upgrade, compositions, docs, benchmark. Use when scaffolding a project, linting, validating, inspecting visual layout in compositions, previewing in the studio, rendering to video, transcribing audio, generating TTS, or troubleshooting the HyperFrames environment.

SkillsMP
Verdict
Suspicious

Risky behavior the analysis could not rule out.

Analyzed Oct 27, 2026, 23:52 UTC at 0722921

Dispute security verdict

If you believe this verdict is incorrect, submit a dispute and we'll review it.

3
findings
high
highest severity
2
threat classes
5,479
files scanned
41/41
checks satisfied
0
package advisories

Why this verdict

  • suspicious: finding skill:plugins/hyperframes/skills/hyperframes-cli:plugins/hyperframes/skills/hyperframes-cli/SKILL.md:24:SUPPLY
  • suspicious: finding skill:plugins/hyperframes/skills/hyperframes-cli:plugins/hyperframes/skills/hyperframes-cli/SKILL.md:33:PERSIST
  • suspicious: finding skill:plugins/hyperframes/skills/hyperframes-cli:plugins/hyperframes/skills/hyperframes-cli/SKILL.md:8:SUPPLY

Security findings 3

Persistence

highContextual riskmedium confidence

The skill instructs the agent to run `npx hyperframes init`, which per the artifact's own text installs AI coding skills into the environment — an agent-control-plane write whose destination and contents the artifact does not disclose (declared, but beyond plain video scaffolding and unverified).

plugins/hyperframes/skills/hyperframes-cli/SKILL.md:33
`init` creates the right file structure, copies media, transcribes audio with Whisper, and installs AI coding skills.
vector:instruction
Counter-argument considered

The artifact's own text confirms `init` installs AI coding skills and mandates using it, an unverified write into the agent control plane with undisclosed destination and contents; it is declared (D3), but declaration is not a carve-out here since installing agent skills is outside the declared core description, so the persistence finding stands.

Supply chain

mediumContextual risklow confidence

Every documented workflow instructs the agent to execute `npx hyperframes ...` without a version pin, which downloads and executes whatever the latest published `hyperframes` package is from the npm registry at run time.

plugins/hyperframes/skills/hyperframes-cli/SKILL.md:24
npx hyperframes init my-video
vector:instruction
Counter-argument considered

The quotes match the shown skill body: every workflow and scaffolding command is an unpinned `npx hyperframes` invocation, and the carve-outs cover only pinned official-registry installs, so the supply-chain exposure stands even though the mechanism is openly declared rather than concealed.

Supply chain

mediumContextual riskmedium confidence

The skill instructs the agent to execute the unpinned npm package `hyperframes` via `npx` for every operation, so whatever code is published under that name at runtime is fetched and run without any version pin.

plugins/hyperframes/skills/hyperframes-cli/SKILL.md:8
Everything runs through `npx hyperframes`
vector:instruction
Counter-argument considered

The blanket statement plus per-operation commands confirm every operation executes the `hyperframes` package via npx with no version pin anywhere in the shown text; unpinned registry execution is not within the pinned-install carve-out, and the mechanism being openly declared does not neutralize the supply-chain exposure.

Open questions 1

What the analysis could not settle from the code alone.

Whether `hyperframes transcribe` and `hyperframes tts` send the user's audio or video off-host to a cloud API (e.g., OpenAI/Whisper service) or process it locally is not stated in the artifact.
Data exfiltration

Coverage gaps 14

Parts of the artifact the static analysis could not fully examine.

context:unanalyzable_binary binary content is only byte-scanned
plugins/codex-security/mcp/helpers.mjs.br.part-000
context:unanalyzable_binary macho content is only byte-scanned
plugins/codex-security/mcp/native/darwin-arm64/unix.node
context:unanalyzable_binary macho content is only byte-scanned
plugins/codex-security/mcp/native/darwin-x64/unix.node
context:unanalyzable_binary elf content is only byte-scanned
plugins/codex-security/mcp/native/linux-arm64-gnu/unix.node
context:unanalyzable_binary elf content is only byte-scanned
plugins/codex-security/mcp/native/linux-arm64-musl/unix.node
context:unanalyzable_binary elf content is only byte-scanned
plugins/codex-security/mcp/native/linux-x64-gnu/unix.node
context:unanalyzable_binary elf content is only byte-scanned
plugins/codex-security/mcp/native/linux-x64-musl/unix.node
context:unanalyzable_binary pe content is only byte-scanned
plugins/codex-security/mcp/native/win32-arm64/windows.node
context:unanalyzable_binary pe content is only byte-scanned
plugins/codex-security/mcp/native/win32-x64/windows.node
context:unanalyzable_binary binary content is only byte-scanned
plugins/codex-security/mcp/server.mjs.br.part-000
context:unanalyzable_binary binary content is only byte-scanned
plugins/codex-security/mcp/server.mjs.br.part-001
context:oversize archive member exceeds 8388608 bytes; truncated, no text
plugins/shopify/skills/shopify-admin/assets/admin_2026-04.json.gz!/admin_2026-04.json
context:decoded_views_exceeded 452 derived view(s) beyond the per-file view cap: decoded:charcode, decoded:rot13, decoded:unicode-escape
plugins/creative-production/mcp/server.bundle.mjs
context:bytes_unavailable yara-x: no bytes to scan
plugins/shopify/skills/shopify-admin/assets/admin_2026-04.json.gz!/admin_2026-04.json