remotion-to-hyperframes

Pass

Audited by Gen Agent Trust Hub on May 17, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes local shell and Python scripts (lint_source.py, render_diff.sh, frame_strip.sh) to manage its workflow. It executes standard CLI tools including ffmpeg and ffprobe for video processing, as well as npm and npx for managing the Remotion and HyperFrames render environments. These operations are standard for the skill's purpose of video framework migration.
  • [EXTERNAL_DOWNLOADS]: The skill workflow involves running npm install within fixture directories to set up Remotion project dependencies. Additionally, the generated HyperFrames HTML templates reference well-known and trusted CDN services, such as Cloudflare (for the GSAP library) and Unpkg (for Lottie-web), to load runtime animation engines. These are considered safe, official sources for these technologies.
  • [SAFE]: The skill implements a 'bow out' security and reliability strategy. A dedicated linter (lint_source.py) scans user-provided Remotion source code for patterns that cannot be deterministically translated to HTML (such as useState or useEffect with side effects). When detected, the skill is instructed to refuse translation and recommend a secure runtime interop pattern instead, preventing the generation of broken or unsafe compositions.
Audit Metadata
Risk Level
SAFE
Analyzed
May 17, 2026, 12:31 AM
Security Audit — agent-trust-hub — remotion-to-hyperframes