remotion-video

Pass

Audited by Gen Agent Trust Hub on Sep 30, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes various shell commands to integrate with development workflows, including gh pr view and gh pr diff for pull request analysis, and pnpm install for dependency management. It also invokes the Remotion CLI for video preview and rendering.
  • [DYNAMIC_EXECUTION]: The skill programmatically generates React components and configuration files (.tsx and .ts) within the project scaffold. These dynamically created files are then compiled and executed at runtime to generate the video frames. This includes inserting synthesized code snippets and narrative text derived from external inputs.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from attacker-controllable sources such as GitHub PR descriptions and blog posts. Ingestion points: Phase 1.2 reads title, body, and diffs from PRs. Boundary markers: The instructions lack explicit boundary delimiters for untrusted data in templates, relying on structured analysis blocks instead. Capability inventory: The skill can write files and execute shell commands for build and rendering processes. Sanitization: Risk is mitigated by a mandatory sensitive content scan in Phase 1.5 and required human approval at four distinct lifecycle gates.
  • [EXTERNAL_DOWNLOADS]: The skill initiates the download and installation of several standard Node.js dependencies (e.g., remotion, react, shiki) from the NPM registry to prepare the rendering environment. These operations are conducted using the user's local package manager.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 30, 2026, 08:46 AM