remotion-best-practices
Pass
Audited by Gen Agent Trust Hub on Apr 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill is an educational resource containing documentation and code snippets for Remotion. All code patterns follow official recommendations and use standard APIs for media manipulation.
- [EXTERNAL_DOWNLOADS]: The skill references the installation of official packages from the
@remotionscope via npm. These are standard dependencies required for the framework's features and originate from the official vendor registry. - [REMOTE_CODE_EXECUTION]: Code examples include fetching media and JSON assets from trusted domains like
remotion.dev,remotion.media, andlottiefiles.com. These are typical operations for a video rendering engine and do not involve untrusted code execution or shell piping. - [DATA_EXFILTRATION]: Use of the
fetchAPI in provided examples is restricted to obtaining public media files or project-specific data required for rendering, with no evidence of sensitive data harvesting or unauthorized network transmission.
Audit Metadata