OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Pass3 providerslatest audit Jun 25, 2026
Independent checks from skills.sh's audit partners.
The skill packages videos with graphic overlays using the hyperframes CLI tool. It downloads external code from the npm registry and processes untrusted video transcripts, which presents a risk of indirect prompt injection and potential shell command injection in suggested scripts.
Detected behaviors
No alerts
No issues