popnow-hyperframes-ai-assets
Generates the media a HyperFrames video cannot draw in code - photoreal hero stills and product scenes, 3 to 5 second B-roll clips, original instrumental music beds, voiceover in 12 languages and sound effects - from one JSON asset plan, and files every result into the project's assets/ folder and the HyperFrames media ledger with its prompt, model, credits and licence note. Use it when a composition has placeholder pictures, silent cuts, no music or lines that should be spoken, or when another video skill asks for a PopNow media pass. The skill is free; generating images, video, music and voiceover through the PopNow API spends PopNow credits (1 credit = $0.001), and the agent quotes credits before any paid run.
70
88%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
Medium
Suggest reviewing before use
W009: Direct money access capability detected (payment gateways, crypto, banking).
What this means
The skill is specifically designed for direct financial operations, giving the agent the ability to move money or execute financial transactions — such as payment processing, cryptocurrency operations, banking integrations, or market order execution.
Why it was flagged
The skill operates a media generation service (PopNow API) that spends credits (1 credit = $0.001) via execution scripts (`scripts/popnow.py` and `scripts/popnow-assets.mjs`). This constitutes a direct financial operation (purchasing/generating paid media assets). Although the skill requires quotes and user confirmation steps in its workflow prompt instructions, there is no documented service-enforced or independent authentication/authorization mechanism for the payment route itself (it relies on API keys like `POPNOW_API_KEY`, but no qualifying independent access control is validated or enforced by an execution layer specifically for payment authorization independent of the agent's instructions).
- Repository
popnow-ai/popnow-skills
- Revision
7116ca7
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.