remotion-captions
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documents how to download the Whisper.cpp engine and speech-to-text models using official Remotion packages (
@remotion/install-whisper-cpp). These resources are fetched from the project's official repositories and infrastructure, representing standard functionality for the intended purpose. - [COMMAND_EXECUTION]: The instructions guide users to install dependencies using standard Remotion CLI commands (
npx remotion add). Additionally,transcribe-captions.mdincludes commented-out examples of usingffmpegviaexecSyncfor audio preprocessing, which serve as developer documentation rather than automated execution scripts. - [DATA_EXFILTRATION]: The skill demonstrates the use of the
fetchAPI andstaticFilehelper to load project-local caption files (JSON and SRT). These operations are restricted to the local development environment and do not involve sending sensitive data to external servers. - [REMOTE_CODE_EXECUTION]: The transcription process utilizes local binaries managed by versioned, official libraries. The skill does not facilitate the execution of arbitrary remote code or untrusted scripts.
Audit Metadata