wrapped-video
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest external data from files like CSV or JSON to populate video templates with personalized statistics.
- Ingestion points: Data is loaded from
users.jsonandusers.csvas shown in therender-all.tsandload-rows.tsreference scripts. - Boundary markers: The skill documentation explicitly instructs and provides code for using Zod schema validation (
wrappedSchema.parse) to ensure data integrity before rendering. - Capability inventory: The skill uses the Remotion renderer to write MP4 files to the local filesystem and performs local bundling of React code.
- Sanitization: External data is validated against a strict Zod schema, which mitigates the risk of malformed or unexpected data impacting the rendering process.
- [DYNAMIC_EXECUTION]: The skill uses the Remotion library to bundle React components and render them into video frames at runtime.
- Patterns: The code utilizes
@remotion/bundlerto create a deployment URL and@remotion/rendererto execute the frame-by-frame video generation. - Context: This dynamic execution is a standard requirement for the Remotion framework and is used here to transform structured data into visual assets using predefined local templates.
Audit Metadata