changelog-video
An agent skill by heygen-com, from heygen-com/hyperframes. Tags: automation, developer-tools, documents, generative, video.
What it does
Turn a weekly changelog .md into a finished branded changelog video (square 1080, ~45-60s, Annie VO, animated brand background, mock-UI visualizations, lowkey captions). Use when the user provides a changelog/digest markdown and wants the weekly video, or says "changelog video". Self-contained — fonts, background, lexicon, and scripts ship in this skill.
Install
With the skills CLI, which installs into Claude Code, Codex, Cursor and other agents:
npx skills add heygen-com/hyperframes --skill changelog-videoOr copy the skill folder into Claude Code's skills directory by hand (~/.claude/skills for every project, or .claude/skills inside one):
git clone --depth 1 https://github.com/heygen-com/hyperframes
cp -r hyperframes/.agents/skills/changelog-video ~/.claude/skills/changelog-videoSafety box score
Grade C, moderate risk: 39 of 100 risk points, rated 2026-10-20. The grade rates what the skill and its scripts can reach on the machine of whoever installs it, across eight categories from shell execution to secrets access. How the score works.
This skill generates a branded changelog video by running local media tooling, aligning captions, and building a project under `projects/active/weekly-changelog-<range>/`. The main risks are external service use for TTS and CDN-related deployment steps, plus the fact that it executes several shell commands and ships unreadable binary assets.
| Category | Level | Why |
|---|---|---|
| Code & shell execution | 2 (moderate) | It explicitly runs local tools and scripts such as `ffmpeg`, `node skills/hyperframes-media/scripts/heygen-tts.mjs`, `uvx --from openai-whisper whisper`, and `scripts/align-captions.mjs`. |
| Network access | 2 (moderate) | It sends work to remote services and pulls remote code: `heygen auth login --oauth`, HeyGen TTS, `aws cloudfront create-invalidation`, and the skeleton loads GSAP from `https://cdn.jsdelivr.net/...`. |
| Filesystem reach | 1 (low) | Its writes are mostly bounded to the project tree, but it creates and overwrites `projects/active/weekly-changelog-<range>/` files and `scripts/align-captions.mjs` writes an output JSON. |
| Secrets & credentials | 2 (moderate) | It requires authenticated access to `heygen auth login --oauth` and may use AWS credentials for CloudFront invalidation, so it touches the person's accounts. |
| Privilege & persistence | 0 (none) | There is no sudo, service installation, shell startup editing, or other OS-level privilege change in the skill files. |
| Instruction hijack surface | 0 (none) | The skill is directive, but it does not tell the agent to ignore higher-priority instructions, follow remote prompts, or hide actions from the user. |
| Irreversible actions | 2 (moderate) | It can carry a video through render and, if used for delivery, invalidate a live CloudFront distribution (`E2BSLVSZ7FG3U0`), which affects remote published content. |
| Transparency | 1 (low) | Several shipped assets are unreadable binaries (`assets/bg-pattern.mp4`, `assets/bgm.mp3`, bundled `.woff2` fonts), so part of the skill cannot be inspected as text. |
Before installing
- Read `SKILL.md` for the HeyGen OAuth and CloudFront steps before enabling it on any account.
- Check whether you are comfortable with a skill that can send text/audio to external services during video generation.
- Inspect `examples/master-skeleton.html` and `scripts/align-captions.mjs` to confirm the only writes stay under the project directory.
Rated 2026-10-20 by an automated review of 8 files from the skill's repository.
Source
- Repository
- heygen-com/hyperframes (all skills from this repository)
- Path
- .agents/skills/changelog-video/SKILL.md
- Branch
- main
- Updated
- 2026-09-19
Related skills
- pr-to-video — Turn a GitHub pull request (a PR URL, owner/repo#N, or 'this PR' in a checked-out repo) into a code-change explainer video — changelog, feature reveal, fix.
- faceless-explainer — Turn arbitrary text — an article, notes, a topic, a brief — into a faceless explainer video: there is no site or footage to capture.
- general-video — Author or edit a custom HyperFrames composition when no specialized workflow fits, or when BRIEF.md sets flow: companion. Use for longer or multi-scene pieces.
- hyperframes — Mandatory entry point: read this first for any request to make, create, edit, animate, or render a video, animation, or motion graphic, including a promo.
- hyperframes-core — The HyperFrames composition contract — build one renderable project.
- hyperframes-creative — Non-animation creative direction for HyperFrames videos.