remotion-video-enhancer

Pass

Audited by Gen Agent Trust Hub on Jul 27, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The scripts/video_transitions.py script utilizes subprocess.run to execute FFmpeg for video processing. This behavior is standard for the skill's primary purpose of video transition enhancement.
  • [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface within the HTML generation workflow.
  • Ingestion points: The scripts/html_animations.py script ingests untrusted data from ppt_data.json and animation_plan.json files.
  • Boundary markers: The skill lacks boundary markers or explicit instructions to ignore potentially malicious content within the processed data.
  • Capability inventory: The skill has the capability to write to the file system and execute shell commands via FFmpeg.
  • Sanitization: There is no evidence of sanitization or escaping when interpolating user-controlled slide content into the animated_viewer.html file, which utilizes dangerouslySetInnerHTML in its React component.
  • [EXTERNAL_DOWNLOADS]: The assets/templates/enhanced_viewer.html file references external JavaScript libraries (React, ReactDOM, and Framer Motion) hosted on the unpkg.com CDN.
  • [COMMAND_EXECUTION]: The SKILL.md file provides setup instructions that include sudo commands for installing system-level dependencies like FFmpeg.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 27, 2026, 01:21 AM
Security Audit — agent-trust-hub — remotion-video-enhancer