json-render-remotion

Pass

Audited by Gen Agent Trust Hub on Sep 11, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill documents the use of project-specific CLI commands, such as bash setup.sh for initial environment preparation and video-render for validation and rendering. These commands are standard operations for development tools and do not involve unauthorized privilege escalation or persistence mechanisms.
  • [INDIRECT_PROMPT_INJECTION]: The tool described in the skill processes TimelineSpec JSON data. While this represents a data ingestion surface, the documentation emphasizes a robust validation layer using Zod schemas to enforce strict data structures. This mitigation helps prevent schema confusion or the injection of malicious content into the rendering pipeline.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 11, 2026, 08:04 AM