Skills Explorer Add Skills

hyperframes-core

An agent skill by heygen-com, from heygen-com/hyperframes. Tags: automation, design, developer-tools, documents.

What it does

The HyperFrames composition contract — build one renderable project. Use for composition structure, the `data-*` timing attributes, `class="clip"`, tracks, sub-compositions, variables, framework-owned media playback, deterministic-render rules, and validation. Read before writing composition HTML.

Install

With the skills CLI, which installs into Claude Code, Codex, Cursor and other agents:

npx skills add heygen-com/hyperframes --skill hyperframes-core

Or copy the skill folder into Claude Code's skills directory by hand (~/.claude/skills for every project, or .claude/skills inside one):

git clone --depth 1 https://github.com/heygen-com/hyperframes
cp -r hyperframes/skills/hyperframes-core ~/.claude/skills/hyperframes-core

Safety box score

Grade B, low risk: 19 of 100 risk points, rated 2026-10-19. The grade rates what the skill and its scripts can reach on the machine of whoever installs it, across eight categories from shell execution to secrets access. How the score works.

This skill is a documentation-only authoring contract for HyperFrames compositions: it mostly tells an agent how to structure HTML, timing attributes, and validation/render commands. The main risks are that it invokes `npx hyperframes` tooling and that some example compositions depend on remote CDN assets, so installing it can still lead to executable/tooling and network exposure.

Category levels, from 0 (none) to 3 (high)
CategoryLevelWhy
Code & shell execution2 (moderate)It explicitly directs the agent to run tooling via `npx hyperframes` (for `timeline`, `check`, `snapshot`, `preview`, and `render`), which executes package code as part of the workflow.
Network access1 (low)The examples include remote asset loading such as `https://cdn.jsdelivr.net/npm/gsap@3.14.2/dist/gsap.min.js`, and `npx hyperframes` may also contact the npm registry if the package is not already installed.
Filesystem reach1 (low)The skill is designed to create and edit project HTML files (`index.html`, `compositions/*.html`) and related assets inside the working tree, but it does not instruct writes outside the project.
Secrets & credentials0 (none)It does not ask for API keys, tokens, passwords, browser sessions, or `.env` contents.
Privilege & persistence0 (none)There is no sudo, service registration, shell startup modification, or other privilege-escalating step in the skill.
Instruction hijack surface1 (low)The docs contain hidden HTML comments and embedded implementation notes (for example `<!-- Shared background — NOT a clip. Always visible. Driven by the timeline. -->`), which are invisible in rendered output even though they are not malicious instructions.
Irreversible actions0 (none)It does not push, deploy, publish, send messages, book anything, or otherwise act autonomously beyond local validation/rendering.
Transparency0 (none)All shipped files are readable markdown; there are no binaries, decoded blobs, or unreviewable installers in the skill bundle.

Before installing

Rated 2026-10-19 by an automated review of 11 files from the skill's repository.

Source

Repository
heygen-com/hyperframes (all skills from this repository)
Path
skills/hyperframes-core/SKILL.md
Branch
main
Updated
2026-09-19