json-render-remotion
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill documents the use of project-specific CLI commands, such as
bash setup.shfor initial environment preparation andvideo-renderfor validation and rendering. These commands are standard operations for development tools and do not involve unauthorized privilege escalation or persistence mechanisms. - [INDIRECT_PROMPT_INJECTION]: The tool described in the skill processes
TimelineSpecJSON data. While this represents a data ingestion surface, the documentation emphasizes a robust validation layer using Zod schemas to enforce strict data structures. This mitigation helps prevent schema confusion or the injection of malicious content into the rendering pipeline.
Audit Metadata