{"id":"cmvelnjah0h5yad07n6u5xnyg","slug":"faceless-explainer","publicId":"c592d165-8db4-4810-866a-61c1e4b30f33","name":"faceless-explainer","description":"Turn arbitrary text — an article, notes, a topic, a brief — into a faceless explainer video: there is no site or footage to capture, so the visuals are invented per scene (typography, abstract graphics, diagrams, data-viz). Use for topic explainers, concept breakdowns, how-tos, listicles. Not a video built from a website (/product-launch-video — promo or tour). Unclear → /hyperframes.","version":"","author":"heygen-com","license":"Apache-2.0","compatibility":"","status":"completed","overallGrade":"F","scannerVersion":11,"fileCount":29,"hasSkillMd":true,"hasScripts":true,"hasReferences":true,"hasEvals":false,"hasAssets":false,"sourceType":"github","sourceUrl":"https://github.com/heygen-com/hyperframes/tree/main/skills/faceless-explainer","createdAt":"2026-10-19T01:52:39.016Z","completedAt":"2026-10-19T01:52:39.011Z","visibility":"public","publishedAt":"2026-08-05T22:05:18.041Z","category":"","frameworks":[],"badgeStatus":"flagged","downloadCount":0,"verdictRationale":{"summary":"Skill failed: 5 hard fails in security or structure checks.","verdict":"fail","scanners":[{"source":"vettd","weight":1,"verdict":"fail"},{"source":"cisco","weight":0.8,"verdict":"fail"}],"consensus":"fail","warnTriggers":[],"policyVersion":"consensus-v1","hardFailTriggers":["Shell execution without sandboxing","Shell execution without sandboxing","Shell execution without sandboxing","Shell execution without sandboxing","Shell execution without sandboxing"]},"verdictPolicyVersion":"consensus-v1","skillId":"cmsgmy4i401pfad07zdhssabd","findings":[{"id":"cmvelnjah0h67ad07q2cdru7u","source":"cisco","category":"security","label":"Node.js child_process module usage for shell command execution","detail":"scripts/assemble-index.mjs:100 — Pattern detected: spawnSync(","severity":"critical","ruleId":"COMMAND_INJECTION_JS_CHILD_PROCESS","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"4404432f21145f0218b46fe9c1769ffa","filepath":"scripts/assemble-index.mjs"},{"id":"cmvelnjah0h65ad07nnnbf608","source":"cisco","category":"security","label":"Node.js child_process module usage for shell command execution","detail":"scripts/assemble-index.mjs:54 — Pattern detected: from \"node:child_process\"","severity":"critical","ruleId":"COMMAND_INJECTION_JS_CHILD_PROCESS","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"4404432f21145f0218b46fe9c1769ffa","filepath":"scripts/assemble-index.mjs"},{"id":"cmvelnjah0h66ad07xsj02jfp","source":"cisco","category":"security","label":"Node.js child_process module usage for shell command execution","detail":"scripts/assemble-index.mjs:84 — Pattern detected: spawnSync(","severity":"critical","ruleId":"COMMAND_INJECTION_JS_CHILD_PROCESS","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"4404432f21145f0218b46fe9c1769ffa","filepath":"scripts/assemble-index.mjs"},{"id":"cmvelnjai0h6aad07m2qc2pjc","source":"cisco","category":"security","label":"Node.js child_process module usage for shell command execution","detail":"scripts/assemble-index.test.mjs:10 — Pattern detected: spawnSync(","severity":"critical","ruleId":"COMMAND_INJECTION_JS_CHILD_PROCESS","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"2183ee90adf78626013a9b2a8b559515","filepath":"scripts/assemble-index.test.mjs"},{"id":"cmvelnjai0h6bad07e00drxrd","source":"cisco","category":"security","label":"Node.js child_process module usage for shell command execution","detail":"scripts/assemble-index.test.mjs:11 — Pattern detected: spawnSync(","severity":"critical","ruleId":"COMMAND_INJECTION_JS_CHILD_PROCESS","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"2183ee90adf78626013a9b2a8b559515","filepath":"scripts/assemble-index.test.mjs"},{"id":"cmvelnjai0h6ead07c8wwysyo","source":"cisco","category":"security","label":"Node.js child_process module usage for shell command execution","detail":"scripts/assemble-index.test.mjs:120 — Pattern detected: spawnSync(","severity":"critical","ruleId":"COMMAND_INJECTION_JS_CHILD_PROCESS","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"2183ee90adf78626013a9b2a8b559515","filepath":"scripts/assemble-index.test.mjs"},{"id":"cmvelnjai0h6cad073h6djnlt","source":"cisco","category":"security","label":"Node.js child_process module usage for shell command execution","detail":"scripts/assemble-index.test.mjs:32 — Pattern detected: spawnSync(","severity":"critical","ruleId":"COMMAND_INJECTION_JS_CHILD_PROCESS","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"2183ee90adf78626013a9b2a8b559515","filepath":"scripts/assemble-index.test.mjs"},{"id":"cmvelnjah0h69ad07z36wpcaz","source":"cisco","category":"security","label":"Node.js child_process module usage for shell command execution","detail":"scripts/assemble-index.test.mjs:5 — Pattern detected: from \"node:child_process\"","severity":"critical","ruleId":"COMMAND_INJECTION_JS_CHILD_PROCESS","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"2183ee90adf78626013a9b2a8b559515","filepath":"scripts/assemble-index.test.mjs"},{"id":"cmvelnjai0h6dad07d0k7cuou","source":"cisco","category":"security","label":"Node.js child_process module usage for shell command execution","detail":"scripts/assemble-index.test.mjs:94 — Pattern detected: spawnSync(","severity":"critical","ruleId":"COMMAND_INJECTION_JS_CHILD_PROCESS","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"2183ee90adf78626013a9b2a8b559515","filepath":"scripts/assemble-index.test.mjs"},{"id":"cmvelnjai0h6fad075cs4afyb","source":"cisco","category":"security","label":"Node.js child_process module usage for shell command execution","detail":"scripts/audio.mjs:25 — Pattern detected: from \"node:child_process\"","severity":"critical","ruleId":"COMMAND_INJECTION_JS_CHILD_PROCESS","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"05841aed0ee153160297839b837a6fac","filepath":"scripts/audio.mjs"},{"id":"cmvelnjai0h6gad07xjfjamut","source":"cisco","category":"security","label":"Node.js child_process module usage for shell command execution","detail":"scripts/audio.mjs:88 — Pattern detected: spawnSync(","severity":"critical","ruleId":"COMMAND_INJECTION_JS_CHILD_PROCESS","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"05841aed0ee153160297839b837a6fac","filepath":"scripts/audio.mjs"},{"id":"cmvelnjai0h6jad078q50i500","source":"cisco","category":"security","label":"Node.js child_process module usage for shell command execution","detail":"scripts/audio.test.mjs:134 — Pattern detected: spawnSync(","severity":"critical","ruleId":"COMMAND_INJECTION_JS_CHILD_PROCESS","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"bf3d9a034ee481c55a1477390feded1f","filepath":"scripts/audio.test.mjs"},{"id":"cmvelnjai0h6kad074yixbh9b","source":"cisco","category":"security","label":"Node.js child_process module usage for shell command execution","detail":"scripts/audio.test.mjs:267 — Pattern detected: spawnSync(","severity":"critical","ruleId":"COMMAND_INJECTION_JS_CHILD_PROCESS","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"bf3d9a034ee481c55a1477390feded1f","filepath":"scripts/audio.test.mjs"},{"id":"cmvelnjai0h6lad07o88baa5s","source":"cisco","category":"security","label":"Node.js child_process module usage for shell command execution","detail":"scripts/audio.test.mjs:291 — Pattern detected: spawnSync(","severity":"critical","ruleId":"COMMAND_INJECTION_JS_CHILD_PROCESS","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"bf3d9a034ee481c55a1477390feded1f","filepath":"scripts/audio.test.mjs"},{"id":"cmvelnjai0h6had07e949zsyi","source":"cisco","category":"security","label":"Node.js child_process module usage for shell command execution","detail":"scripts/audio.test.mjs:5 — Pattern detected: from \"node:child_process\"","severity":"critical","ruleId":"COMMAND_INJECTION_JS_CHILD_PROCESS","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"bf3d9a034ee481c55a1477390feded1f","filepath":"scripts/audio.test.mjs"},{"id":"cmvelnjai0h6iad07zvvm0scg","source":"cisco","category":"security","label":"Node.js child_process module usage for shell command execution","detail":"scripts/audio.test.mjs:53 — Pattern detected: spawnSync(","severity":"critical","ruleId":"COMMAND_INJECTION_JS_CHILD_PROCESS","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"bf3d9a034ee481c55a1477390feded1f","filepath":"scripts/audio.test.mjs"},{"id":"cmvelnjai0h6mad07qm3ze4cu","source":"cisco","category":"security","label":"Node.js child_process module usage for shell command execution","detail":"scripts/transitions.test.mjs:5 — Pattern detected: from \"node:child_process\"","severity":"critical","ruleId":"COMMAND_INJECTION_JS_CHILD_PROCESS","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"42c4c2aad13082659ea01023b9481c80","filepath":"scripts/transitions.test.mjs"},{"id":"cmvelnjai0h6nad07cymley5c","source":"cisco","category":"security","label":"Node.js child_process module usage for shell command execution","detail":"scripts/transitions.test.mjs:58 — Pattern detected: spawnSync(","severity":"critical","ruleId":"COMMAND_INJECTION_JS_CHILD_PROCESS","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"42c4c2aad13082659ea01023b9481c80","filepath":"scripts/transitions.test.mjs"},{"id":"cmvelnjah0h5zad07pd4siiwf","source":"vettd","category":"security","label":"Shell execution without sandboxing","detail":"Detected in scripts/assemble-index.mjs:54 — `import { spawnSync } from \"node:child_process\";`","severity":"critical","ruleId":"VTD-0018","owaspLlmCategory":null,"intent":"negligent","chainId":null,"fingerprint":"9584474f4877cf450071e272e4017d48","filepath":"scripts/assemble-index.mjs"},{"id":"cmvelnjah0h60ad07z60z6lar","source":"vettd","category":"security","label":"Shell execution without sandboxing","detail":"Detected in scripts/assemble-index.test.mjs:5 — `import { spawnSync } from \"node:child_process\";`","severity":"critical","ruleId":"VTD-0018","owaspLlmCategory":null,"intent":"negligent","chainId":null,"fingerprint":"3490d53c23cb1279cd2355ff8c625dc8","filepath":"scripts/assemble-index.test.mjs"},{"id":"cmvelnjah0h61ad0779itduqj","source":"vettd","category":"security","label":"Shell execution without sandboxing","detail":"Detected in scripts/audio.mjs:25 — `import { spawnSync } from \"node:child_process\";`","severity":"critical","ruleId":"VTD-0018","owaspLlmCategory":null,"intent":"negligent","chainId":null,"fingerprint":"e251b9d4fd26fbcd471e2c702ef01a20","filepath":"scripts/audio.mjs"},{"id":"cmvelnjah0h62ad07p81cn06h","source":"vettd","category":"security","label":"Shell execution without sandboxing","detail":"Detected in scripts/audio.test.mjs:5 — `import { spawnSync } from \"node:child_process\";`","severity":"critical","ruleId":"VTD-0018","owaspLlmCategory":null,"intent":"negligent","chainId":null,"fingerprint":"4a534eccbd37a9428b7e0226599cde2e","filepath":"scripts/audio.test.mjs"},{"id":"cmvelnjah0h63ad07n6geskui","source":"vettd","category":"security","label":"Shell execution without sandboxing","detail":"Detected in scripts/transitions.test.mjs:5 — `import { spawnSync } from \"node:child_process\";`","severity":"critical","ruleId":"VTD-0018","owaspLlmCategory":null,"intent":"negligent","chainId":null,"fingerprint":"6164c856412f6f1a1e712ea65a141139","filepath":"scripts/transitions.test.mjs"},{"id":"cmvelnjah0h68ad07ikx2zat7","source":"cisco","category":"security","label":"Script contacts a destination the documentation never mentions","detail":"scripts/assemble-index.mjs:581 — Script contacts or configures 'cdn.jsdelivr.net' but the skill documentation never visibly mentions it. Undocumented network destinations can indicate behaviour the manifest and description do not disclose.","severity":"low","ruleId":"UNDECLARED_NETWORK_DESTINATION","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"adc20c36aa3812e1cbd322d36c096d53","filepath":"scripts/assemble-index.mjs"},{"id":"cmvelnjah0h64ad07hm9sgwlm","source":"cisco","category":"security","label":"Skill does not specify a license","detail":"SKILL.md — Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.","severity":"info","ruleId":"MANIFEST_MISSING_LICENSE","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"592f7ac7731768f0fd0bba83f30850f9","filepath":"SKILL.md"}],"scannerRuns":[{"source":"cisco","status":"success","verdict":null,"grade":"F","findingCount":20,"criticalCount":18,"highCount":18},{"source":"vettd","status":"success","verdict":null,"grade":"F","findingCount":5,"criticalCount":5,"highCount":5}],"user":{"name":"Justin Pacella","image":"https://avatars.githubusercontent.com/u/97124458?v=4"},"repository":{"owner":"heygen-com","name":"hyperframes"},"freshness":{"status":"unreachable","reason":"ref_not_found","retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-22T02:19:39.493Z","lastVerifiedAt":"2026-10-21T04:38:13.395Z","lastChangeDetectedAt":"2026-10-19T01:47:35.054Z","scannedHash":"43a49f7ff976951ff456975b6316172682f89cd0","latestUpstreamHash":"43a49f7ff976951ff456975b6316172682f89cd0","nextCheckDueAt":"2026-10-29T02:19:39.493Z"},"signalCategories":[{"category":"safety","label":"Safety","form":"graded","verdict":null,"rows":[]},{"category":"reliability","label":"Reliability & Quality","form":"graded","verdict":null,"rows":[]},{"category":"performance","label":"Performance","form":"measured","verdict":{"form":"measured","magnitudes":[{"ruleId":"performance/static-context-tokens","label":"Static context tokens","value":6765,"unit":null,"method":"tiktoken/cl100k_base/skill-md-body"}]},"rows":[{"origin":"signal","id":"cmvelnjek0h6uad07qvqg3z61","subjectType":"skill_audit","subjectId":"cmvelnjah0h5yad07n6u5xnyg","relatedType":"","relatedId":"","dataCategory":"performance","sourceClass":"scan","source":"vettd","ruleId":"performance/static-context-tokens","severity":null,"label":"Static context tokens","detail":null,"valueNum":6765,"valueText":null,"unit":null,"method":"tiktoken/cl100k_base/skill-md-body","derivation":null,"confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-19T01:52:37.000Z","payload":null},{"origin":"signal","id":"cmvelnjhn0h7oad07xp9faolm","subjectType":"skill_audit","subjectId":"cmvelnjah0h5yad07n6u5xnyg","relatedType":"","relatedId":"","dataCategory":"performance","sourceClass":"scan","source":"vettd","ruleId":"performance/progressive-disclosure","severity":null,"label":"Progressive disclosure","detail":null,"valueNum":null,"valueText":"present","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-19T01:52:37.000Z","payload":null}]},{"category":"cost","label":"Cost","form":"measured","verdict":null,"rows":[]},{"category":"compatibility","label":"Compatibility","form":"unjudged","verdict":{"form":"unjudged"},"rows":[{"origin":"signal","id":"cmvelnjes0h6wad076iqo4aa4","subjectType":"skill_audit","subjectId":"cmvelnjah0h5yad07n6u5xnyg","relatedType":"","relatedId":"","dataCategory":"compatibility","sourceClass":"scan","source":"vettd","ruleId":"compatibility/declared-environment-assumptions","severity":null,"label":"Declared environment assumptions","detail":null,"valueNum":null,"valueText":"","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-19T01:52:37.000Z","payload":null},{"origin":"signal","id":"cmvelnjg30h78ad07c8enk7su","subjectType":"skill_audit","subjectId":"cmvelnjah0h5yad07n6u5xnyg","relatedType":"","relatedId":"","dataCategory":"compatibility","sourceClass":"scan","source":"vettd","ruleId":"compatibility/declared-name","severity":null,"label":"Declared skill name","detail":null,"valueNum":null,"valueText":"faceless-explainer","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-19T01:52:37.000Z","payload":null},{"origin":"signal","id":"cmvelnjhu0h7qad07ak4xrz1f","subjectType":"skill_audit","subjectId":"cmvelnjah0h5yad07n6u5xnyg","relatedType":"","relatedId":"","dataCategory":"compatibility","sourceClass":"scan","source":"vettd","ruleId":"compatibility/cli-help","severity":null,"label":"CLI help","detail":null,"valueNum":null,"valueText":"present","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-19T01:52:37.000Z","payload":null},{"origin":"signal","id":"cmvelnji10h7sad07rzj4soun","subjectType":"skill_audit","subjectId":"cmvelnjah0h5yad07n6u5xnyg","relatedType":"","relatedId":"","dataCategory":"compatibility","sourceClass":"scan","source":"vettd","ruleId":"compatibility/structured-output","severity":null,"label":"Structured output","detail":null,"valueNum":null,"valueText":"present","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-19T01:52:37.000Z","payload":null}]},{"category":"sentiment","label":"Popularity","form":"unjudged","verdict":null,"rows":[]},{"category":"characteristics","label":"Characteristics","form":"unjudged","verdict":null,"rows":[]}],"signalCount":50,"publisherSupplied":["name","description","author","version","license"]}