Skills Explorer Add Skills

hyperframes-creative

An agent skill by heygen-com, from heygen-com/hyperframes. Tags: design, documents, generative, office, video.

What it does

Non-animation creative direction for HyperFrames videos. Use for design spec (frame.md / design.md) handling, palettes, typography, narration, beat planning, audio-reactive visuals, composition patterns, and brand / style decisions. For atomic motion patterns and scene blueprints, use `hyperframes-animation`.

Install

With the skills CLI, which installs into Claude Code, Codex, Cursor and other agents:

npx skills add heygen-com/hyperframes --skill hyperframes-creative

Or copy the skill folder into Claude Code's skills directory by hand (~/.claude/skills for every project, or .claude/skills inside one):

git clone --depth 1 https://github.com/heygen-com/hyperframes
cp -r hyperframes/skills/hyperframes-creative ~/.claude/skills/hyperframes-creative

Safety box score

Grade B, low risk: 25 of 100 risk points, rated 2026-10-20. The grade rates what the skill and its scripts can reach on the machine of whoever installs it, across eight categories from shell execution to secrets access. How the score works.

This skill is mostly creative-direction documentation, but it ships helper scripts that can run external tools and a bootstrap path that may pull npm packages. The main risks are command execution via `ffmpeg`, possible network fetches during package bootstrap, and one unreadable loader plus binary assets that reduce auditability.

Category levels, from 0 (none) to 3 (high)
CategoryLevelWhy
Code & shell execution2 (moderate)`scripts/extract-audio-data.py` runs `ffmpeg` via `subprocess.run(cmd, capture_output=True)`, and `scripts/package-loader.test.mjs` exercises spawned Node/npm processes, so the skill can execute external commands.
Network access2 (moderate)`SKILL.md` says `contrast-report.mjs` "can bootstrap the bundled HyperFrames package version," and the package-loader tests expect a fallback to `@latest`, which implies remote package retrieval may occur.
Filesystem reach1 (low)The audio extractor writes directly to the user-chosen path with `open(args.output, "w", encoding="utf-8")`, so it can overwrite files wherever the caller points it.
Secrets & credentials0 (none)No file or script here reads keychains, browser sessions, `.env` files, or other credential stores.
Privilege & persistence0 (none)There is no sudo, global install, service registration, shell startup editing, or OS-setting change in the reviewed files.
Instruction hijack surface0 (none)I did not find instructions to skip confirmations, hide actions, or follow fetched prompt text; the comments in examples are ordinary documentation, not directive injection.
Irreversible actions0 (none)The skill does not push, post, deploy, pay, or delete on its own, and the storyboard workflow explicitly says to stop and wait for human approval.
Transparency2 (moderate)`scripts/package-loader.mjs` could not be read in this review, and several shipped font binaries were also unreadable, so part of the install/bootstrap behavior is not fully auditable.

Before installing

Rated 2026-10-20 by an automated review of 39 files from the skill's repository.

Source

Repository
heygen-com/hyperframes (all skills from this repository)
Path
skills/hyperframes-creative/SKILL.md
Branch
main
Updated
2026-09-19