remotion-best-practices
Pass
Audited by Gen Agent Trust Hub on Apr 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute various shell commands for dependency management and environment setup, such as installing Remotion-specific packages (
npx remotion add), third-party libraries (npm i mapbox-gl), and running utility scripts (node generate-voiceover.ts). - [EXTERNAL_DOWNLOADS]: Several rules involve fetching external resources, including media assets from the official Remotion domain (
remotion.media), Lottie animations, and map data from Mapbox. It also includes instructions for downloading the Whisper.cpp binary and language models for audio transcription using the@remotion/install-whisper-cpppackage. - [CREDENTIALS_UNSAFE]: The skill manages sensitive API keys (ElevenLabs and Mapbox) by instructing the user to store them in environment variables or
.envfiles, which is a secure and standard practice for development environments. - [REMOTE_CODE_EXECUTION]: While the skill suggests downloading binaries and running scripts, these actions are performed via well-known packages and official APIs within the Remotion ecosystem to support its primary video processing features.
Audit Metadata