remotion-render
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the
beltCLI tool from a remote shell script hosted on GitHub (raw.githubusercontent.com/inference-sh/skills/refs/heads/main/cli-install.md). This is a standard installation method for the service mentioned in the skill and is documented for transparency. - [COMMAND_EXECUTION]: The skill utilizes the
beltCLI tool (belt login,belt app run) and other development tools (npx,python) to interact with the rendering service. These commands are intentional and follow the stated purpose of the skill. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided React/Remotion code (
codeparameter) to generate video output. While this creates a surface for code processing, the execution happens within theinference.shenvironment, and there are no direct instructions to bypass AI safety filters. Standard caution when rendering untrusted code applies. - [TRUSTED_SOURCE]: All external references (GitHub, inference.sh, remotion.dev) point to the service provider's official infrastructure or well-known development resources, which is consistent with the skill's functionality.
Audit Metadata