remotion
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill documents several methods for ingesting external data into video compositions, creating a potential surface for indirect injection.
- Ingestion points: The
getInputProps()function inreference.mdallows data ingestion via CLI flags, and thecalculateMetadatafunction inreference.mddemonstrates fetching data from external API endpoints. - Boundary markers: The documentation does not provide examples of delimiters or warnings to prevent the agent from following instructions embedded in the ingested data.
- Capability inventory: The skill documents powerful tools in
reference.mdincludingrenderMedia(video rendering),deployFunction(AWS Lambda deployment), anddeploySite(site deployment to cloud providers). - Sanitization: There is no evidence of sanitization, escaping, or schema validation provided for external data before it is processed by the rendering engine.
- [DYNAMIC_EXECUTION]: The skill provides technical documentation for Remotion's core rendering and deployment capabilities which involve runtime code compilation and execution.
- Runtime compilation:
reference.mddescribes the use of@remotion/bundler'sbundle()function to compile source code into executable bundles at runtime. - Dynamic loading:
reference.mddetails the execution of bundled code using@remotion/rendererfunctions such asrenderMediaandrenderStill. - Remote deployment: The skill documents the use of
@remotion/lambdato deploy and execute code on remote AWS infrastructure.
Audit Metadata