remotion-video
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes various shell commands to integrate with development workflows, including
gh pr viewandgh pr difffor pull request analysis, andpnpm installfor dependency management. It also invokes the Remotion CLI for video preview and rendering. - [DYNAMIC_EXECUTION]: The skill programmatically generates React components and configuration files (
.tsxand.ts) within the project scaffold. These dynamically created files are then compiled and executed at runtime to generate the video frames. This includes inserting synthesized code snippets and narrative text derived from external inputs. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from attacker-controllable sources such as GitHub PR descriptions and blog posts. Ingestion points: Phase 1.2 reads title, body, and diffs from PRs. Boundary markers: The instructions lack explicit boundary delimiters for untrusted data in templates, relying on structured analysis blocks instead. Capability inventory: The skill can write files and execute shell commands for build and rendering processes. Sanitization: Risk is mitigated by a mandatory sensitive content scan in Phase 1.5 and required human approval at four distinct lifecycle gates.
- [EXTERNAL_DOWNLOADS]: The skill initiates the download and installation of several standard Node.js dependencies (e.g.,
remotion,react,shiki) from the NPM registry to prepare the rendering environment. These operations are conducted using the user's local package manager.
Audit Metadata