hyperframes-audio
An agent skill by heygen-com, from heygen-com/hyperframes. Tags: api, automation, debugging, developer-tools.
What it does
Use when audio already placed in a HyperFrames composition needs to be mixed: fade-in/fade-out, crossfade, track gain or volume, volume automation, ducking, a music bed that fights a voiceover (voiceover carve), effects on a track (EQ, compressor, limiter, gate, saturation, delay, reverb, chorus, phaser, bitcrush), automation envelopes drawn on a track's volume or any effect parameter, or one submix bus carrying a chain, a fader and an automation clock for several tracks at once (`<hf-audio-group>`). Don't use for sourcing or generating audio — finding BGM, SFX, or making a voiceover is `/media-use`. Don't use for clip timing or track layout, which is `/hyperframes-core`.
Install
With the skills CLI, which installs into Claude Code, Codex, Cursor and other agents:
npx skills add heygen-com/hyperframes --skill hyperframes-audio
Or copy the skill folder into Claude Code's skills directory by hand (~/.claude/skills for every project, or .claude/skills inside one):
git clone --depth 1 https://github.com/heygen-com/hyperframes
cp -r hyperframes/skills/hyperframes-audio ~/.claude/skills/hyperframes-audio
Safety box score
Grade B, low risk: 18 of 100 risk points, rated 2026-10-20. The grade rates what the skill and its scripts can reach on the machine of whoever installs it, across eight categories from shell execution to secrets access. How the score works.
This skill is a local audio-mix authoring tool: it reads a composition HTML file, decodes its media with ffmpeg, and rewrites mix attributes back into that same file. The main risks are external command execution and in-place mutation of the composition; it does not touch secrets or require elevated privileges.
| Category | Level | Why |
|---|---|---|
| Code & shell execution | 2 (moderate) | It spawns external commands with `execFileSync`, including `ffmpeg` for media decoding in `scripts/carve.mjs` and Node processes in the tests; the docs also tell the user to run `npx hyperframes ...` commands. |
| Network access | 2 (moderate) | The skill tells the user to install and run registry packages, e.g. `npm i -D @hyperframes/core` and `npx hyperframes check` / `npx hyperframes normalize-audio`, which can fetch code from npm. |
| Filesystem reach | 1 (low) | It rewrites the composition file in place with `writeFileSync(compPath, html.replace(bedTag, nextTag))`, but the write is scoped to the chosen composition file rather than system paths. |
| Secrets & credentials | 0 (none) | No code or instructions read keychains, tokens, `.env` files, browser sessions, or other credential stores. |
| Privilege & persistence | 0 (none) | There is no sudo, service registration, shell startup editing, or global/system configuration change. |
| Instruction hijack surface | 0 (none) | The files contain strong workflow guidance, but nothing that tells the agent to ignore higher-priority instructions, hide behavior, or follow remote instructions. |
| Irreversible actions | 0 (none) | It does not send messages, post, pay, book, deploy, or delete external resources; its action is limited to editing the local composition file. |
| Transparency | 0 (none) | All shipped files are plain markdown or JavaScript and are readable; there are no binaries, minified blobs, or decoded-at-runtime payloads. |
Before installing
- Confirm `ffmpeg` on PATH is trusted, since the skill executes it on your media files.
- Work on a copy of the composition HTML first; the CLI writes back to the file you point it at.
- Install `@hyperframes/core` locally ahead of time, or run the skill in a scratch project before using it on a real composition.
- Try `--dry-run` first to inspect the planned attribute changes without modifying files.
Rated 2026-10-20 by an automated review of 8 files from the skill's repository.
Source
- Repository
- heygen-com/hyperframes (all skills from this repository)
- Path
- skills/hyperframes-audio/SKILL.md
- Branch
- main
- Updated
- 2026-09-19
Related skills
- remotion-to-hyperframes — Port an existing Remotion (React) composition's source to HyperFrames HTML.
- mcp-developer — Use when building, debugging, or extending MCP servers or clients that connect AI systems with external tools and data sources.
- tool-design — This skill should be used for the tool-interface layer of an agent system specifically: writing tool descriptions agents can route on.
- code-improver — Runs an autonomous review-and-fix improvement loop over any code target — a skill, plugin, module, or directory — using a reviewer the user names.
- pr-improver — Runs an autonomous review-and-fix improvement loop over the current branch's changes until a PR review comes back clean.
- skill-improver — Runs an autonomous review-and-fix improvement loop over a Claude Code skill until a review comes back clean, with a cross-round findings ledger.