video-render
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructions for a video rendering workflow using the Remotion framework. It uses standard npm and npx commands for its operations, with no malicious patterns or unauthorized activity detected.
- [COMMAND_EXECUTION]: The skill uses the Bash tool to execute rendering commands (e.g., npx remotion render). This is consistent with its stated purpose.
- [EXTERNAL_DOWNLOADS]: Uses npx to run the remotion CLI, which may download the package from the official npm registry. This is a standard dependency management practice.
- [PROMPT_INJECTION]: The skill instructions include placeholders for user input (e.g., {CompositionId}, {filename}) within shell commands. This creates a surface for indirect prompt injection if the agent interpolates untrusted data without sanitization.
- Ingestion points: Shell command placeholders in SKILL.md.
- Boundary markers: None present.
- Capability inventory: Bash and Write tool access.
- Sanitization: No sanitization or validation logic is specified in the skill.
Audit Metadata