remotion-render

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructions direct users to install the belt CLI using npx skills add belt-sh/cli and reference installation scripts hosted on the inference-sh GitHub repository. These components are necessary for interacting with the targeted video rendering service.
  • [DYNAMIC_EXECUTION]: The skill is designed to take React/Remotion component code (TSX) as a string input and execute it within the Remotion rendering environment using the belt CLI tool.
  • [INDIRECT_PROMPT_INJECTION]: The skill identifies a surface for indirect prompt injection as it processes untrusted React component code provided by the user.
  • Ingestion points: The code parameter within the input schema of the belt app run command in SKILL.md.
  • Boundary markers: None present; the skill treats the entire code string as executable component logic without explicit delimiters to separate user data from instructions.
  • Capability inventory: Uses the Bash(belt *) tool to perform remote rendering operations and handle application execution.
  • Sanitization: No evidence of sanitization, validation, or escaping of the input TSX code is provided in the skill documentation.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 11:29 AM
Security Audit — agent-trust-hub — remotion-render