remotion-to-hyperframes
Pass
Audited by Gen Agent Trust Hub on May 17, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes local shell and Python scripts (
lint_source.py,render_diff.sh,frame_strip.sh) to manage its workflow. It executes standard CLI tools includingffmpegandffprobefor video processing, as well asnpmandnpxfor managing the Remotion and HyperFrames render environments. These operations are standard for the skill's purpose of video framework migration. - [EXTERNAL_DOWNLOADS]: The skill workflow involves running
npm installwithin fixture directories to set up Remotion project dependencies. Additionally, the generated HyperFrames HTML templates reference well-known and trusted CDN services, such as Cloudflare (for the GSAP library) and Unpkg (for Lottie-web), to load runtime animation engines. These are considered safe, official sources for these technologies. - [SAFE]: The skill implements a 'bow out' security and reliability strategy. A dedicated linter (
lint_source.py) scans user-provided Remotion source code for patterns that cannot be deterministically translated to HTML (such asuseStateoruseEffectwith side effects). When detected, the skill is instructed to refuse translation and recommend a secure runtime interop pattern instead, preventing the generation of broken or unsafe compositions.
Audit Metadata