hyperframes-core

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). In references/subagent-dispatch.md, the required runtime workflow DISPATCH sends assembled file contents (e.g., .hyperframes/frame-packets/<frame_id>.md and _role.md) verbatim to child agents; the only outsider-authored text that could be ingested is through project-owned files like the user’s STORYBOARD.md/chat feedback, not from an external queue/feed the workflow monitors directly.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The docs include an in-template tag that will be fetched & executed at render/preview time (GSAP), e.g. "https://cdn.jsdelivr.net/npm/gsap@3.14.2/dist/gsap.min.js", which the skill treats as the primary animation runtime and thus is an external runtime-executed dependency.