remotion-to-hyperframes@r1
CAUTIONPublisher claims: "Bring existing video code or footage into HyperFrames and verify it frame by frame against the original - Remotion first, also Motion Canvas, Lottie, Three.js, p5.js, canvas or plain HTML/CSS animation, or renders from Manim, After Effects or Blender. Use to port, convert, migrate or reuse work made with another tool." Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Registry skills.shPublisher heygen-com · joined 2 days agoInstalls 498KLast detonated 35 h ago
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
Static findings
HIGH
npx invocation of non-well-known packageassets/test-corpus/tier-2-multi-scene/README.md:43 · npx invocation of non-well-known package — may execute untrusted code
AST06HIGH
npx invocation of non-well-known packageassets/test-corpus/tier-1-title-card/README.md:34 · npx invocation of non-well-known package — may execute untrusted code
AST06HIGH
npx invocation of non-well-known packageassets/test-corpus/tier-3-data-driven/README.md:81 · npx invocation of non-well-known package — may execute untrusted code
AST06HIGH
npx invocation of non-well-known packagereferences/escape-hatch.md:52 · npx invocation of non-well-known package — may execute untrusted code
AST06HIGH
npx invocation of non-well-known packageassets/test-corpus/run.sh:135 · npx invocation of non-well-known package — may execute untrusted code
AST06HIGH
npx invocation of non-well-known packageSKILL.md:25 · npx invocation of non-well-known package — may execute untrusted code
AST06HIGH
npx invocation of non-well-known packageSKILL.md:39 · npx invocation of non-well-known package — may execute untrusted code
AST06HIGH
URL with embedded credentialsreferences/fonts.md:22 · URL with embedded credentials — may be phishing or credential leaking
AST07