remotion-video-production

Pass

Audited by Gen Agent Trust Hub on Mar 21, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides instructions for using the Bash tool to execute Remotion CLI commands, including npx remotion preview and npx remotion render, to process and output video files.
  • [PROMPT_INJECTION]: An indirect prompt injection surface is present as the skill dynamically generates React components and logic based on user-supplied instructions for video content and specifications. \n
  • Ingestion points: User instructions for video goals, scene descriptions, and narrative text are processed to create the scene plan and implementation code (SKILL.md). \n
  • Boundary markers: The skill does not define specific delimiters or instructions for the agent to isolate user-provided data from the executable code generated in the .tsx files. \n
  • Capability inventory: The presence of Write and Bash tools allows the agent to create and run code based on user inputs, creating a vulnerability if malicious instructions are successfully injected. \n
  • Sanitization: No sanitization or validation steps are outlined for processing user-provided text before it is interpolated into the React component templates.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 21, 2026, 04:23 PM