remotion-video-enhancer
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/video_transitions.pyscript utilizessubprocess.runto execute FFmpeg for video processing. This behavior is standard for the skill's primary purpose of video transition enhancement. - [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface within the HTML generation workflow.
- Ingestion points: The
scripts/html_animations.pyscript ingests untrusted data fromppt_data.jsonandanimation_plan.jsonfiles. - Boundary markers: The skill lacks boundary markers or explicit instructions to ignore potentially malicious content within the processed data.
- Capability inventory: The skill has the capability to write to the file system and execute shell commands via FFmpeg.
- Sanitization: There is no evidence of sanitization or escaping when interpolating user-controlled slide content into the
animated_viewer.htmlfile, which utilizesdangerouslySetInnerHTMLin its React component. - [EXTERNAL_DOWNLOADS]: The
assets/templates/enhanced_viewer.htmlfile references external JavaScript libraries (React, ReactDOM, and Framer Motion) hosted on theunpkg.comCDN. - [COMMAND_EXECUTION]: The
SKILL.mdfile provides setup instructions that includesudocommands for installing system-level dependencies like FFmpeg.
Audit Metadata