hyperframes-registry
An agent skill by heygen-com, from heygen-com/hyperframes. Tags: api, automation, developer-tools, mcp, web.
What it does
Search, install, and wire registry blocks and components into HyperFrames compositions. Use BEFORE hand-building any named visual — whenever a brief, a user, or a storyboard names a look, effect, treatment, or transition such as CRT scanlines, glitch, chromatic aberration, film grain, a shimmer sweep, a chart, a code or terminal window, a map, or a confetti burst — because roughly 400 hosted items already cover many of them and the search ranks all of them with nothing installed, no project, and no account. Also use when running hyperframes add or hyperframes catalog, installing one item or every block matching a tag, wiring an installed item into index.html, or working with hyperframes.json. Covers discovery, install locations, block sub-composition wiring, component snippet merging, and authoring a new block or component to contribute upstream (idea → scaffold → validate → PR).
Install
With the skills CLI, which installs into Claude Code, Codex, Cursor and other agents:
npx skills add heygen-com/hyperframes --skill hyperframes-registry
Or copy the skill folder into Claude Code's skills directory by hand (~/.claude/skills for every project, or .claude/skills inside one):
git clone --depth 1 https://github.com/heygen-com/hyperframes
cp -r hyperframes/skills/hyperframes-registry ~/.claude/skills/hyperframes-registry
Safety box score
Grade C, moderate risk: 44 of 100 risk points, rated 2026-10-14. The grade rates what the skill and its scripts can reach on the machine of whoever installs it, across eight categories from shell execution to secrets access. How the score works.
This skill installs and wires HyperFrames registry blocks/components, and it also guides authors through creating and shipping new registry items upstream. The main risks are networked installs and lookups, shell execution through `npx`, and an end-to-end contribution flow that can push branches, open PRs, and publish previews.
| Category | Level | Why |
|---|---|---|
| Code & shell execution | 2 (moderate) | It routinely runs shell/npm commands such as `npx hyperframes catalog`, `npx tsx scripts/generate-registry-items.ts`, and `npx hyperframes publish`, so using it grants real command execution. |
| Network access | 2 (moderate) | `hyperframes add` fetches item files on every install and the docs fall back to `curl -s https://raw.githubusercontent.com/heygen-com/hyperframes/main/registry/registry.json`, so it regularly talks to remote hosts. |
| Filesystem reach | 1 (low) | It writes installs into `compositions/<name>.html` and `compositions/components/<name>.html`, and may auto-create `hyperframes.json`, but stays within the project tree. |
| Secrets & credentials | 1 (low) | The contribution path explicitly mentions an AWS profile for `scripts/upload-docs-images.sh` and `gh auth login`, so it can touch existing cloud/GitHub credentials. |
| Privilege & persistence | 1 (low) | There is no sudo or global service setup, but it does mutate account/tooling state via `gh auth login` and repository config such as `hyperframes.json` path remaps. |
| Instruction hijack surface | 1 (low) | The docs strongly steer agent behavior with lines like `Always query in English` and `Do not wait for the on-device tier to have answered`, but they do not ask it to hide actions or ignore higher-level rules. |
| Irreversible actions | 3 (high) | It can publish previews and push a branch/PR with `npx hyperframes publish`, `git push origin feat/registry-{name}`, and `gh pr create ...` without a human gate. |
| Transparency | 0 (none) | All provided files are readable markdown; there are no binaries, minified blobs, or decoded-at-runtime code in the skill bundle. |
Before installing
- Read `references/contributing.md` before allowing any `git push`, `gh pr create`, or `npx hyperframes publish` flow.
- Check whether you want network access for `hyperframes add` and the optional `--on-device` download.
- Verify `hyperframes.json` path remaps so installs only land where you expect.
- If you will use the docs-image upload path, confirm the AWS profile and GitHub auth context first.
Rated 2026-10-14 by an automated review of 12 files from the skill's repository.
Source
- Repository
- heygen-com/hyperframes (all skills from this repository)
- Path
- skills/hyperframes-registry/SKILL.md
- Branch
- main
- Updated
- 2026-09-19
Related skills
- figma — Import Figma content into a HyperFrames composition — rendered assets, brand tokens, components.
- atlassian-mcp — Integrates with Atlassian products to manage project tracking and documentation via MCP protocol.
- mcp-developer — Use when building, debugging, or extending MCP servers or clients that connect AI systems with external tools and data sources.
- agents-connect — Use when connecting your agent to external APIs, tools, or services via Gateway, or restricting tool access with Cedar policies.
- chrome-mcp-troubleshooting — Diagnose and fix Claude in Chrome MCP extension connectivity issues.
- gh-cli — Enforces authenticated gh CLI workflows over unauthenticated curl, WebFetch, and MCP fetch patterns.