hyperframes-cli
What this skill does
A CLI tool for video composition, rendering, and cloud deployment workflows. It supports local, HeyGen-hosted cloud, AWS Lambda, and Google Cloud Run rendering.
github/heygen-com - Privilege Escalation - 40.4k stars
Threat analysis
Skill info
pkg:github/heygen-com/hyperframes@9734578?skill=hyperframes-cliAssessments (2)
Privilege Escalation
Privilege Escalation via local-llm-review
references/cloud.md
The CLI requires access to `~/.heygen/credentials` for cloud rendering authentication. This is a potential risk if the file contains sensitive credentials and is not properly secured.Data Exposure
Data Exposure via local-llm-review
references/lambda.md
The skill references AWS Lambda rendering, which may involve accessing AWS credentials (e.g., `~/.aws/credentials`). If not properly secured, this could lead to data exposure.Badge
Add the Anomity scan badge for hyperframes-cli to your README.
How Anomity governs this at runtime
Scan-time vetting tells you what a skill says it will do. Anomity's Endpoint Sensor sees what agents actually do: it discovers skills alongside every other AI artifact on the endpoint, and runtime governance can allow, deny, or log the tool calls a skill triggers. Policy violations route to your SIEM, Slack, email, or Jira, backed by a queryable 90-day audit trail.
Book a 30-minute demo to see your own skill inventory.
Methodology and disputes
Every skill is assessed by the Anomity Skill Intelligence engine against its public source; findings indicate risk patterns, not confirmed exploitation. Maintainer of hyperframes-cli? Report an issue or request a rescan.
