style-sampling@1.0.12
VERIFIED· install onlyPublisher claims: "Make a new episode in a proven video style - Collage Explainer, Finance Explainer, Animated Science Explainer, 3D Brand Explainer, 3D True Crime - on the person's topic. Use for "an episode of", "in the style of", "sample this style", 「用这个风格做一集」. One video to copy is reverse-any-video." Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Coverage
Nothing executable in the bundle ran; the trace covers the install step only.- Tested
- every file read, file written and host contacted by what ran
- Not tested
- use of the skill by an agent
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-09 and scored it 92/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationsStatic findings
Run `npx hyperframes auth status` first, every time, resuming included. It is for the sign-in: don't repeat its plan or credits line to the person.Fix: Pin versions and sources; vendor anything fetched at install time.- Everything else REMIX.md §0 asks (chapters, language) takes REMIX.md's default; write each one, and the length, with why, in the project's `CLAUDE.md`.Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.npx hyperframes templates pull <slug>Fix: Pin versions and sources; vendor anything fetched at install time.…every stand-in, every check that failed and why, and the footage licence table. Update the project's `CLAUDE.md` with how it was made, and open it with a line that any change to this episode …Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.- **Not signed in.** Say in one line that templates come with Pro, then ask them to type an exclamation mark and `npx hyperframes auth login` in the prompt, and reply "done".Fix: Pin versions and sources; vendor anything fetched at install time.…emplates are part of HyperFrames Pro, ask them to type an exclamation mark and `npx hyperframes billing subscribe --feature templates --skill style-sampling` in the prompt, wh…Fix: Pin versions and sources; vendor anything fetched at install time.…les](../hyperframes/references/plugin-installation.md). **Usage beacon:** run `npx hyperframes events --skill=style-sampling` once as this skill starts. It sends the skill's …Fix: Pin versions and sources; vendor anything fetched at install time.Cost to the agent
Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.
Known vulnerabilities
Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.