remotion-video-production
Pass
Audited by Gen Agent Trust Hub on Mar 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for using the
Bashtool to execute Remotion CLI commands, includingnpx remotion previewandnpx remotion render, to process and output video files. - [PROMPT_INJECTION]: An indirect prompt injection surface is present as the skill dynamically generates React components and logic based on user-supplied instructions for video content and specifications. \n
- Ingestion points: User instructions for video goals, scene descriptions, and narrative text are processed to create the scene plan and implementation code (SKILL.md). \n
- Boundary markers: The skill does not define specific delimiters or instructions for the agent to isolate user-provided data from the executable code generated in the
.tsxfiles. \n - Capability inventory: The presence of
WriteandBashtools allows the agent to create and run code based on user inputs, creating a vulnerability if malicious instructions are successfully injected. \n - Sanitization: No sanitization or validation steps are outlined for processing user-provided text before it is interpolated into the React component templates.
Audit Metadata