remotion-video-creation
Pass
Audited by Gen Agent Trust Hub on Jul 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides documentation and code examples for the Remotion video framework. All identified patterns for media handling, asset importing, and animation are consistent with official best practices.
- [COMMAND_EXECUTION]: The skill includes instructions to install Remotion ecosystem packages using the official npx remotion add command across several rule files.
- [EXTERNAL_DOWNLOADS]: Documents patterns for fetching remote assets like Lottie animations and subtitle files from URLs, as well as referencing official documentation for Tailwind integration.
- [PROMPT_INJECTION]: Identifies an indirect prompt injection surface where external data is ingested to drive video content. Ingestion points: fetch() calls in rules/calculate-metadata.md, rules/lottie.md, and rules/import-srt-captions.md. Boundary markers: None explicitly demonstrated in the provided examples. Capability inventory: The environment allows for network requests and reading local project assets. Sanitization: No explicit validation or filtering of external data content is shown in the provided code snippets.
Audit Metadata