hyperframes-media
What this skill does
Audio and media asset generation for HyperFrames compositions, including TTS, BGM, SFX, transcription, and captions.
github/calesthio - Privilege Escalation - 46.7k stars
Threat analysis
Skill info
pkg:github/calesthio/OpenMontage@4eab34c?skill=hyperframes-mediaAssessments (1)
Privilege Escalation
Privilege Escalation via local-llm-review
scripts/lib/heygen.mjs
The code attempts to read a `.env` file, which may contain sensitive credentials. If the `.env` file is not properly secured, this could lead to privilege escalation or unauthorized access.Badge
Add the Anomity scan badge for hyperframes-media to your README.
How Anomity governs this at runtime
Scan-time vetting tells you what a skill says it will do. Anomity's Endpoint Sensor sees what agents actually do: it discovers skills alongside every other AI artifact on the endpoint, and runtime governance can allow, deny, or log the tool calls a skill triggers. Policy violations route to your SIEM, Slack, email, or Jira, backed by a queryable 90-day audit trail.
Book a 30-minute demo to see your own skill inventory.
Methodology and disputes
Every skill is assessed by the Anomity Skill Intelligence engine against its public source; findings indicate risk patterns, not confirmed exploitation. Maintainer of hyperframes-media? Report an issue or request a rescan.
