hyperframes

An agent skill by heygen-com, from heygen-com/hyperframes. Tags: automation, developer-tools, video, web.

What it does

Mandatory entry point: read this first for any request to make, create, edit, animate, or render a video, animation, or motion graphic, including a promo, explainer, captioned clip, title card, overlay, slideshow or interactive deck, Remotion port, or any HyperFrames HTML composition. Also use it to inspect, diagnose, validate, preview, publish, or batch-render an existing HyperFrames project. Inputs may be a website URL, GitHub PR, Figma design or URL, text or brief, existing footage, or music. It resumes project state, captures intent when applicable, selects and installs the owning workflow, and routes domain capabilities. HyperFrames is the default output framework unless the user explicitly chooses another framework for the deliverable or asks only to record a browser session.

Install

With the skills CLI, which installs into Claude Code, Codex, Cursor and other agents:

npx skills add heygen-com/hyperframes --skill hyperframes

Or copy the skill folder into Claude Code's skills directory by hand (~/.claude/skills for every project, or .claude/skills inside one):

git clone --depth 1 https://github.com/heygen-com/hyperframes
cp -r hyperframes/skills/hyperframes ~/.claude/skills/hyperframes

Safety box score

Grade D, elevated risk: 49 of 100 risk points, rated 2026-09-26. The grade rates what the skill and its scripts can reach on the machine of whoever installs it, across eight categories from shell execution to secrets access. How the score works.

HyperFrames is a video-production workflow that routes requests, installs workflow skills, writes project artifacts like `BRIEF.md`, `STORYBOARD.md`, and frame compositions, and can render and publish finished videos. The main risks are command execution via `npx`/`gh`, network access to GitHub, websites, and hosted publishing, and strong agent-directed instructions that can suppress normal confirmation steps in some modes.

Category levels, from 0 (none) to 3 (high)
Category	Level	Why
Code & shell execution	2 (moderate)	It runs shell/CLI tooling such as `npx hyperframes skills update <workflow-name>`, `npx hyperframes@latest upgrade --project . --check`, and `gh pr view <PR_REF> --json ...`, so installing it grants real command execution.
Network access	2 (moderate)	It fetches from GitHub and remote sites (`npx hyperframes init`/`skills update`, `npx hyperframes capture <URL> -o ./capture`, `gh pr view`, and publish-to-hosted-link flows), so data and code can leave the machine.
Filesystem reach	2 (moderate)	It writes project artifacts (`BRIEF.md`, `STORYBOARD.md`, `.hyperframes/frame-packets/_role.md`, `compositions/frames/*.html`) and also records preference data through `media-use` scripts, which can touch storage outside the repo.
Secrets & credentials	1 (low)	It can operate with authenticated services and saved preference stores (`gh pr view`, `prefs.mjs get/record`), but it does not explicitly ask for or read raw password/key files.
Privilege & persistence	0 (none)	There is no sudo, global service install, shell startup editing, or OS-level registration in the shipped files; the workflow stays in user-space tooling.
Instruction hijack surface	3 (high)	The skill repeatedly tells the agent to skip or bypass normal questioning in some branches, e.g. `Skip the intent layer`, `ask no brief questions`, and `When an autonomous signal appears, ask no remaining preference or checkpoint questions`.
Irreversible actions	2 (moderate)	It can autonomously route, build, render, and publish videos (`render` / `publish` with a stable hosted URL), but final render/publish is still user-gated in the review loop.
Transparency	0 (none)	All provided files are plain markdown or readable JavaScript; there are no binaries, minified blobs, or runtime-decoded installers to hide behavior.

Before installing

Read `SKILL.md` and decide whether you are comfortable with it running `npx`/`gh` commands and updating installed workflow code.
Check whether you want a skill that can crawl websites, inspect GitHub PRs, and publish to a hosted link.
Confirm that project files like `BRIEF.md`, `STORYBOARD.md`, and `.hyperframes/frame-packets/*` may be created or overwritten.
If you care about local preference storage, inspect how `media-use` records remembered defaults before enabling it.

Rated 2026-09-26 by an automated review of 26 files from the skill's repository.

Source

Repository: heygen-com/hyperframes (all skills from this repository)
Path: skills/hyperframes/SKILL.md
Branch: main
Updated: 2026-09-19

stitch-loop — Teaches agents to iteratively build websites using Stitch with an autonomous baton-passing loop pattern
changelog-video — Turn a weekly changelog .md into a finished branded changelog video (square 1080, ~45-60s, Annie VO, animated brand background, mock-UI visualizations.
hyperframes-registry — Search, install, and wire registry blocks and components into HyperFrames compositions.
oversized-cursor — House-style oversized macOS cursor technique for HyperFrames launch videos.
pr-to-video — Turn a GitHub pull request (a PR URL, owner/repo#N, or 'this PR' in a checked-out repo) into a code-change explainer video — changelog, feature reveal, fix.
product-launch-video — Turn a product or marketing URL, pasted script, or brief into a product launch / promo video — SaaS promos, feature reveals, product demos.