{"id":"cmuxm20qj237bad07puelcz6m","slug":"hyperframes","publicId":"2c7ea369-9148-4c6d-8292-484506a6e09e","name":"hyperframes","description":"Render MP4/WebM videos from HTML compositions.","version":"1.0.0","author":"heygen-com","license":"Apache-2.0","compatibility":"","status":"completed","overallGrade":"B","scannerVersion":11,"fileCount":8,"hasSkillMd":true,"hasScripts":true,"hasReferences":true,"hasEvals":false,"hasAssets":false,"sourceType":"github","sourceUrl":"https://github.com/NousResearch/hermes-agent/tree/main/optional-skills/creative/hyperframes","createdAt":"2026-10-07T04:31:48.466Z","completedAt":"2026-10-07T04:31:48.462Z","visibility":"public","publishedAt":"2026-07-28T15:35:06.269Z","category":"","frameworks":[],"badgeStatus":"conditional","downloadCount":0,"verdictRationale":{"summary":"Skill has warnings: 2 warnings in security or structure checks.","verdict":"warn","scanners":[{"source":"vettd","weight":1,"verdict":"warn"},{"source":"cisco","weight":0.8,"verdict":"pass"}],"consensus":"warn","warnTriggers":["Unrestricted operation framing","References external URL — review for indirect prompt injection risk"],"policyVersion":"consensus-v1","hardFailTriggers":[]},"verdictPolicyVersion":"consensus-v1","skillId":"cms4thija015mad06ekzmyo4s","findings":[{"id":"cmuxm20qj237ead07y0expcsi","source":"cisco","category":"security","label":"Attempting to install system packages with elevated privileges","detail":"scripts/setup.sh:48 — Pattern detected: sudo apt-get install","severity":"medium","ruleId":"TOOL_ABUSE_SYSTEM_PACKAGE_INSTALL","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"fc71fb73ddf00928ef416750ceaeed9a","filepath":"scripts/setup.sh"},{"id":"cmuxm20qj237fad07xjo8xqbk","source":"cisco","category":"security","label":"Attempting to install system packages with elevated privileges","detail":"scripts/setup.sh:49 — Pattern detected: sudo dnf install","severity":"medium","ruleId":"TOOL_ABUSE_SYSTEM_PACKAGE_INSTALL","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"fc71fb73ddf00928ef416750ceaeed9a","filepath":"scripts/setup.sh"},{"id":"cmuxm20qj237dad07qbuh25pz","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in SKILL.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"42638a8b7e9fc5df27449992eaebc724","filepath":"SKILL.md"},{"id":"cmuxm20qj237cad076owwmoy0","source":"vettd","category":"security","label":"Unrestricted operation framing","detail":"Detected in references/features.md:282 — `these rules only apply to shader transition compositions. css-only compositions have no restrictions.`","severity":"medium","ruleId":"VTD-0070","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"45d4e5ebdc92018d9fe3d2e8f8ef9f8d","filepath":"references/features.md"},{"id":"cmuxm20qj237gad07wayt7g4n","source":"cisco","category":"security","label":"Script contacts a destination the documentation never mentions","detail":"scripts/setup.sh:52 — Script contacts or configures 'ffmpeg.org' but the skill documentation never visibly mentions it. Undocumented network destinations can indicate behaviour the manifest and description do not disclose.","severity":"low","ruleId":"UNDECLARED_NETWORK_DESTINATION","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"1a961e159a56b606b04a1c0c9a6a6b7a","filepath":"scripts/setup.sh"}],"scannerRuns":[{"source":"cisco","status":"success","verdict":null,"grade":"B","findingCount":3,"criticalCount":0,"highCount":0},{"source":"vettd","status":"success","verdict":null,"grade":"B","findingCount":2,"criticalCount":0,"highCount":0}],"user":{"name":"Justin Pacella","image":"https://avatars.githubusercontent.com/u/97124458?v=4"},"repository":{"owner":"NousResearch","name":"hermes-agent"},"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T15:09:30.052Z","lastVerifiedAt":"2026-10-22T15:09:30.052Z","lastChangeDetectedAt":"2026-10-09T07:08:29.065Z","scannedHash":"047c7916f7e2729f6dbda336438361555029997c","latestUpstreamHash":"047c7916f7e2729f6dbda336438361555029997c","nextCheckDueAt":"2026-10-23T13:10:06.031Z"},"signalCategories":[{"category":"safety","label":"Safety","form":"graded","verdict":null,"rows":[]},{"category":"reliability","label":"Reliability & Quality","form":"graded","verdict":null,"rows":[]},{"category":"performance","label":"Performance","form":"measured","verdict":{"form":"measured","magnitudes":[{"ruleId":"performance/static-context-tokens","label":"Static context tokens","value":3693,"unit":null,"method":"tiktoken/cl100k_base/skill-md-body"}]},"rows":[{"origin":"signal","id":"cmuxm2ahv256zad070zunodzy","subjectType":"skill_audit","subjectId":"cmuxm20qj237bad07puelcz6m","relatedType":"","relatedId":"","dataCategory":"performance","sourceClass":"scan","source":"vettd","ruleId":"performance/progressive-disclosure","severity":null,"label":"Progressive disclosure","detail":null,"valueNum":null,"valueText":"present","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T04:31:33.000Z","payload":null},{"origin":"signal","id":"cmuxm235w23r1ad0722zxxajs","subjectType":"skill_audit","subjectId":"cmuxm20qj237bad07puelcz6m","relatedType":"","relatedId":"","dataCategory":"performance","sourceClass":"scan","source":"vettd","ruleId":"performance/static-context-tokens","severity":null,"label":"Static context tokens","detail":null,"valueNum":3693,"valueText":null,"unit":null,"method":"tiktoken/cl100k_base/skill-md-body","derivation":null,"confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T04:31:33.000Z","payload":null}]},{"category":"cost","label":"Cost","form":"measured","verdict":null,"rows":[]},{"category":"compatibility","label":"Compatibility","form":"unjudged","verdict":{"form":"unjudged"},"rows":[{"origin":"signal","id":"cmuxm2aq4258iad073xskquzx","subjectType":"skill_audit","subjectId":"cmuxm20qj237bad07puelcz6m","relatedType":"","relatedId":"","dataCategory":"compatibility","sourceClass":"scan","source":"vettd","ruleId":"compatibility/cli-help","severity":null,"label":"CLI help","detail":null,"valueNum":null,"valueText":"absent","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T04:31:33.000Z","payload":null},{"origin":"signal","id":"cmuxm23sb23x5ad07hn5z57zp","subjectType":"skill_audit","subjectId":"cmuxm20qj237bad07puelcz6m","relatedType":"","relatedId":"","dataCategory":"compatibility","sourceClass":"scan","source":"vettd","ruleId":"compatibility/declared-environment-assumptions","severity":null,"label":"Declared environment assumptions","detail":null,"valueNum":null,"valueText":"","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T04:31:33.000Z","payload":null},{"origin":"signal","id":"cmuxm271724l2ad07b45i6jbr","subjectType":"skill_audit","subjectId":"cmuxm20qj237bad07puelcz6m","relatedType":"","relatedId":"","dataCategory":"compatibility","sourceClass":"scan","source":"vettd","ruleId":"compatibility/declared-name","severity":null,"label":"Declared skill name","detail":null,"valueNum":null,"valueText":"hyperframes","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T04:31:33.000Z","payload":null},{"origin":"signal","id":"cmuxm2aw0259qad07lvkzgh5d","subjectType":"skill_audit","subjectId":"cmuxm20qj237bad07puelcz6m","relatedType":"","relatedId":"","dataCategory":"compatibility","sourceClass":"scan","source":"vettd","ruleId":"compatibility/structured-output","severity":null,"label":"Structured output","detail":null,"valueNum":null,"valueText":"absent","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-07T04:31:33.000Z","payload":null}]},{"category":"sentiment","label":"Popularity","form":"unjudged","verdict":null,"rows":[]},{"category":"characteristics","label":"Characteristics","form":"unjudged","verdict":null,"rows":[]}],"signalCount":30,"publisherSupplied":["name","description","author","version","license"]}