remotion-best-practices
Pass
Audited by Gen Agent Trust Hub on Apr 1, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for using the Remotion CLI (
npx remotion ...) and FFmpeg via shell commands for video processing tasks such as trimming and re-encoding. These are standard operations within the Remotion development environment. - [EXTERNAL_DOWNLOADS]: The skill describes processes for downloading external assets and dependencies:
- Fetches Google Fonts using the
@remotion/google-fontspackage. - Downloads Whisper.cpp binaries and language models via the
@remotion/install-whisper-cpputility for audio transcription. - Interacts with the ElevenLabs API for text-to-speech generation.
- References Mapbox for map-based animations. These involve well-known technology services and official project tools.
- [DATA_EXFILTRATION]: While the skill instructions involve environment variables for API keys (e.g.,
REMOTION_MAPBOX_TOKEN,ELEVENLABS_API_KEY), it correctly advises storing these in.envfiles, which is a standard and safe development practice. No patterns of credential harvesting or exfiltration to untrusted domains were detected.
Audit Metadata