attack-path-analysis
Use when Codex is already in the attack-path-analysis phase of a security scan or the user explicitly asks to trace a security…
Install and wire registry blocks and components into HyperFrames compositions. Use when running hyperframes add, installing a block or component, wiring an installed item into index.html, or working with hyperframes.json. Covers the add command, install locations, block
Claude Code
$ npx -y skills add CoWork-OS/CoWork-OS --skill hyperframes-registry --agent claude-code
Codex
$ npx skills add CoWork-OS/CoWork-OS --skill hyperframes-registry -a codex -y
Cursor
$ npx skills add CoWork-OS/CoWork-OS --skill hyperframes-registry -a cursor -y
Gemini CLI
$ npx skills add CoWork-OS/CoWork-OS --skill hyperframes-registry -a gemini-cli -y
GitHub Copilot
$ npx skills add CoWork-OS/CoWork-OS --skill hyperframes-registry -a github-copilot -y
OpenCode
$ npx skills add CoWork-OS/CoWork-OS --skill hyperframes-registry -a opencode -y
Windsurf
$ npx skills add CoWork-OS/CoWork-OS --skill hyperframes-registry -a windsurf -y
name: hyperframes-registry description: Install and wire registry blocks and components into HyperFrames compositions. Use when running hyperframes add, installing a block or component, wiring an installed item into index.html, or working with hyperframes.json. Covers the add command, install locations, block sub-composition wiring, component snippet merging, and registry discovery. version: "0.4.3" metadata: author: CoWork OS Contributors <info@coworkosapp.com> source-author: "HeyGen"
The registry provides reusable blocks and components installable via `hyperframes add <name>`.
hyperframes add data-chart # install a block hyperframes add grain-overlay # install a component hyperframes add shimmer-sweep --dir . # target a specific project hyperframes add data-chart --json # machine-readable output hyperframes add data-chart --no-clipboard # skip clipboard (CI/headless)
After install, the CLI prints which files were written and a snippet to paste into your host composition. The snippet is a starting point — you'll need to add `data-composition-id` (must match the block's internal composition ID), `data-start`, and `data-track-index` attributes when wiring blocks.
Note: `hyperframes add` only works for blocks and components. For examples, use `hyperframes init <dir> --example <name>` instead.
Blocks install to `compositions/<name>.html` by default. Components install to `compositions/components/<name>.html` by default.
These paths are configurable in `hyperframes.json`:
{
"registry": "https://raw.githubusercontent.com/heygen-com/hyperframes/main/registry",
"paths": {
"blocks": "compositions",
"components": "compositions/components",
"assets": "assets"
}
}See [install-locations.md](./references/install-locations.md) for full details.
Blocks are standalone compositions — include them via `data-composition-src` in your host `index.html`:
<div data-composition-id="data-chart" data-composition-src="compositions/data-chart.html" data-start="2" data-duration="15" data-track-index="1" data-width="1920" data-height="1080" ></div>
Key attributes:
See [wiring-blocks.md](./references/wiring-blocks.md) for full details.
Components are snippets — paste their HTML into your composition's markup, their CSS into your style block, and their JS into your script (if any):
1. Read the installed file (e.g., `compositions/components/grain-overlay.html`) 2. Copy the HTML elements into your composition's `<div data-composition-id="...">` 3. Copy the `<style>` block into your composition's styles 4. Copy any `<script>` content into your composition's script (before your timeline code) 5. If the component exposes GSAP timeline integration (see the comment block in the snippet), add those calls to your timeline
See [wiring-components.md](./references/wiring-components.md) for full details.
Browse available items:
# Read the registry manifest curl -s https://raw.githubusercontent.com/heygen-com/hyperframes/main/registry/registry.json
Each item's `registry-item.json` contains: name, type, title, description, tags, dimensions (blocks only), duration (blocks only), and file list.
See [discovery.md](./references/discovery.md) for details on filtering by type and tags.
Use when Codex is already in the attack-path-analysis phase of a security scan or the user explicitly asks to trace a security…
Use when the user asks for a deep, exhaustive, multi-pass, or variance-reducing repository-wide Codex Security scan. Run repeated…
Use when Codex is already in the finding-discovery phase of a security scan or the user explicitly asks to discover candidate…
Use when the user explicitly asks to fix and verify a validated or plausible security finding. Do not use as the primary trigger…
Use when the user asks for a security review of a pull request, commit, branch diff, working-tree patch, or other Git-backed…
Use when the user asks for a repository-wide or scoped-path security scan.
Shape output for a reader with ADHD: lead with the next action, number multi-step work, restate state across turns, suppress…
Set up the owner profile so a personal agent knows who it works for (first-run setup, \"get to know me\"), or distill colleague,…