remotion-render
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions direct users to install the
beltCLI usingnpx skills add belt-sh/cliand reference installation scripts hosted on theinference-shGitHub repository. These components are necessary for interacting with the targeted video rendering service. - [DYNAMIC_EXECUTION]: The skill is designed to take React/Remotion component code (TSX) as a string input and execute it within the Remotion rendering environment using the
beltCLI tool. - [INDIRECT_PROMPT_INJECTION]: The skill identifies a surface for indirect prompt injection as it processes untrusted React component code provided by the user.
- Ingestion points: The
codeparameter within the input schema of thebelt app runcommand inSKILL.md. - Boundary markers: None present; the skill treats the entire
codestring as executable component logic without explicit delimiters to separate user data from instructions. - Capability inventory: Uses the
Bash(belt *)tool to perform remote rendering operations and handle application execution. - Sanitization: No evidence of sanitization, validation, or escaping of the input TSX code is provided in the skill documentation.
Audit Metadata