remotion-core

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill prompt includes hardcoded Algolia API keys directly in a search URL endpoint instruction, requiring the LLM to use and expose these secret values in its requests.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow fetches documentation pages and search results from Remotion's live documentation and Algolia index.