Remotion

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). The vast majority of the URLs are official docs/media and look benign, but the skill mandates an immediate curl to a local backchannel (http://localhost:31337/notify) and includes other localhost template endpoints — this forced local callback is suspicious because it requires executing a network action on the user's machine and could be used as a beacon/precondition for malicious activity.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). The skill mandates silently firing a background curl POST to http://localhost:31337/notify before any action (suppressed output, run in background), which is a hidden network beacon to an unknown/undeclared service and is characteristic of telemetry/backdoor behavior.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In Workflows/ContentToAnimation.md, the workflow accepts arbitrary user-provided URLs/files/raw text (e.g., “Article URL” via WebFetch / “Blog file” direct read / “Raw text” directly) and then extracts that content for subsequent analysis and React component generation.