Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md script["scripts/carve.mjs<br/>detects the pair, dynamic by default"]
Security audit
hyperframes-audio
Security checks for vulnerabilities and agentic risk
Overview
This skill is a coherent HyperFrames audio-mixing helper; its file changes and local audio analysis are disclosed and tied to that purpose.
Before installing or running it, treat it as a project-modifying audio tool: run `--dry-run` first, review the selected bed and voice tracks, keep your composition under version control, and prefer pinned trusted versions for `hyperframes` and `@hyperframes/core` rather than ad hoc latest-package execution.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Behavioral ASTexec() Call, eval() Call, Dynamic Import
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (16)
Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md script["scripts/carve.mjs<br/>detects the pair, dynamic by default"]
Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md script["scripts/carve.mjs<br/>detects the pair, dynamic by default"]
Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md script["scripts/carve.mjs<br/>detects the pair, dynamic by default"]
Rp1
Medium
- Category
- MCP Rug Pull
- Confidence
- 90% confidence
- Finding
The documentation instructs users to run
npx hyperframes checkwithout pinning an exact package version.npxmay fetch the latest published package or resolve unexpectedly from the environment, which creates a supply-chain risk: a compromised or malicious newer release could execute code on the user's system during verification.- Content
Rp1
Medium
- Category
- MCP Rug Pull
- Confidence
- 93% confidence
- Finding
The documentation instructs users to run
npx hyperframeswithout pinning an exact package version.npxwill fetch the latest published package if it is not already installed, so a compromised upstream release or typosquatted package update could execute attacker-controlled code on the user's machine. In a skill context, this is more dangerous because the command is presented as a normal remediation workflow users may copy-paste during troubleshooting.- Content
Rp1
Medium
- Category
- MCP Rug Pull
- Confidence
- 93% confidence
- Finding
This second command again uses
npx hyperframeswithout a pinned version, creating the same supply-chain execution risk. Because this variant uses--write, it may also encourage users to run a network-fetched tool in a mode that modifies local project files, increasing the practical impact of malicious package behavior. The surrounding audio-mixing context does not reduce risk; it makes execution more likely because the command is framed as the recommended fix path.- Content
Whitespace Padding
Medium
- Category
- Prompt Injection
- Confidence
- 70% confidence
- Finding
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
- Content
md ## Filter — which frequencies a track may occupy | Effect | Parameter | | ----------- | ----------------------------------------------------------------------------------------------------------- | | `highpass` | `frequency` 20–20000 Hz (300, log) **AUTO** · `q` 0.1–20 (0.707, log) **AUTO** · `poles` `1`\|`2` (2) | | `lowpass` | `frequency` 100–20000 Hz (8000, log) **AUTO** · `q` 0.1–20 (0.707, log) **AUTO** · `poles` `1`\|`2` (2) |
Whitespace Padding
Medium
- Category
- Prompt Injection
- Confidence
- 70% confidence
- Finding
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
- Content
md ## Dynamics — how level behaves over time | Effect | Parameter | | ------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | | `gain` | `gain` −60–12 dB (0) **AUTO** | | `compressor` | `threshold` −60–0 dB (−24) · `ratio` 1–20 (4) · `attack` 0.01–2000 ms (20, log) · `release` 0.01–9000 ms (250, log) · `knee` 1–8 (2.83) · `makeup` 0–36 dB (0) · `mix` 0–1 (1) |
Whitespace Padding
Medium
- Category
- Prompt Injection
- Confidence
- 70% confidence
- Finding
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
- Content
md | Effect | Parameter | | ------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | | `gain` | `gain` −60–12 dB (0) **AUTO** | | `compressor` | `threshold` −60–0 dB (−24) · `ratio` 1–20 (4) · `attack` 0.01–2000 ms (20, log) · `release` 0.01–9000 ms (250, log) · `knee` 1–8 (2.83) · `makeup` 0–36 dB (0) · `mix` 0–1 (1) | | `limiter` | `limit` −24–0 dB (−1) · `attack` 0.1–80 ms (5) · `release` 1–8000 ms (50, log) · `level_out` −24–24 dB (0) | | `gate` | `threshold` −80–0 dB (−35) · `range` −80–0 dB (−24) · `ratio` 1–20 (10) · `attack` 0.01–9000 ms (1, log) · `release` 0.01–9000 ms (100, log) · `knee` 1–8 (2.83) |
Whitespace Padding
Medium
- Category
- Prompt Injection
- Confidence
- 70% confidence
- Finding
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
- Content
md ## Nonlinear — changes the waveform's shape | Effect | Parameter | | ---------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | `saturate` | `type` `tanh`\|`atan`\|`cubic`\|`exp`\|`alg`\|`quintic`\|`sin`\|`erf`\|`hard` (tanh) · `threshold` −40–0 dB (−6) · `output` −24–24 dB (0) **AUTO** · `oversample` 1–8× (4) | | `bitcrush` | `bits` 1–32 (8) · `samples` 1–250× (1) · `mix` 0–1 (1) |
Whitespace Padding
Medium
- Category
- Prompt Injection
- Confidence
- 70% confidence
- Finding
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
- Content
md | Effect | Parameter | | ---------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | `saturate` | `type` `tanh`\|`atan`\|`cubic`\|`exp`\|`alg`\|`quintic`\|`sin`\|`erf`\|`hard` (tanh) · `threshold` −40–0 dB (−6) · `output` −24–24 dB (0) **AUTO** · `oversample` 1–8× (4) | | `bitcrush` | `bits` 1–32 (8) · `samples` 1–250× (1) · `mix` 0–1 (1) | `tanh` is the gentlest curve and `hard` is outright clipping. Higher `oversample` costs more CPU and keeps aliasing down. `samples` repeats each sample N times — a
Whitespace Padding
Medium
- Category
- Prompt Injection
- Confidence
- 70% confidence
- Finding
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
- Content
md ## Time — space and width | Effect | Parameter | | -------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | `delay` | `time` 1–5000 ms (250, log) **AUTO** · `feedback` 0.01–0.95 (0.35) **AUTO** · `mix` 0–1 (0.4) **AUTO** | | `reverb` | `size` 0.05–1 (0.7) · `damping` 0–1 (0.5) · `wet` 0–1 (0.35) **AUTO** · `dry` 0–1 (0.7) **AUTO** |
Whitespace Padding
Medium
- Category
- Prompt Injection
- Confidence
- 70% confidence
- Finding
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
- Content
md ### Voice — make a real voice sound like its better self | Preset | Answers | Chain | | ----------------- | ------------------------------- | --------------------------------------------------------------------------------------------------- | | `voice-clean` | "My voice sounds amateur" | Remove Rumble → Reduce Mud → Even Out Loudness → Add Clarity → Peak Ceiling | | `voice-broadcast` | "I want it to sound like radio" | Remove Rumble → Reduce Boxiness → Even Out Loudness → Add Clarity → Add Air → Warmth → Peak Ceiling |
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 79% confidence
- Finding
This code rewrites the composition file in place via
writeFileSync, which can alter user data and overwrite prior state. Although there is a--dry-runoption and a final success message, there is no confirmation prompt before the write, and the top-level description does not explicitly warn that the input file will be modified in place.- Content
Missing User Warnings
Low
- Category
- Not specified by scanner
- Confidence
- 83% confidence
- Finding
This code creates temporary directories, removes them recursively, writes files, creates symlinks, and later invokes a child process in tests. Although these are test operations, the file contains no explicit user-facing disclosure, confirmation, or warning that running the test will modify the local filesystem and execute subprocesses.
- Content
Static analysis
Detected: suspicious.dangerous_exec
Shell command execution detected (child_process).
Critical
- Code
- suspicious.dangerous_exec
- Location
- scripts/carve.test.mjs:193