remotion
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a technical reference for the Remotion framework. All instructions follow standard development practices for React and Node.js environments.
- [COMMAND_EXECUTION]: The documentation includes standard CLI commands for installing dependencies (
npx remotion add,npm i) and using Remotion's bundled media tools (bunx remotion ffmpeg). These are legitimate developer tools intended for video processing. - [EXTERNAL_DOWNLOADS]: The skill mentions fetching assets such as images, videos, and Lottie animations from remote sources. The referenced domains (e.g.,
remotion.media,lottiefiles.com,elevenlabs.io) are reputable and consistent with the skill's purpose. The use of@remotion/install-whisper-cppto download transcription models is a documented feature of that specific library. - [CREDENTIALS_SAFE]: The skill correctly instructs users to store sensitive API keys (Mapbox and ElevenLabs) in environment variables (
.envfiles) rather than hardcoding them into source code, which aligns with security best practices.
Audit Metadata