wrapped-video

Pass

Audited by Gen Agent Trust Hub on Oct 4, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest external data from files like CSV or JSON to populate video templates with personalized statistics.
  • Ingestion points: Data is loaded from users.json and users.csv as shown in the render-all.ts and load-rows.ts reference scripts.
  • Boundary markers: The skill documentation explicitly instructs and provides code for using Zod schema validation (wrappedSchema.parse) to ensure data integrity before rendering.
  • Capability inventory: The skill uses the Remotion renderer to write MP4 files to the local filesystem and performs local bundling of React code.
  • Sanitization: External data is validated against a strict Zod schema, which mitigates the risk of malformed or unexpected data impacting the rendering process.
  • [DYNAMIC_EXECUTION]: The skill uses the Remotion library to bundle React components and render them into video frames at runtime.
  • Patterns: The code utilizes @remotion/bundler to create a deployment URL and @remotion/renderer to execute the frame-by-frame video generation.
  • Context: This dynamic execution is a standard requirement for the Remotion framework and is used here to transform structured data into visual assets using predefined local templates.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 4, 2026, 12:38 PM