Skills
Navigate
skills/dexhunter/remotion/video-report/Gen Agent Trust Hub

video-report

Fail

Audited by Gen Agent Trust Hub on Jul 15, 2026

Risk Level: HIGHEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructions direct the agent to download content from an arbitrary URL provided by a user when reporting an issue.
  • [COMMAND_EXECUTION]: The skill executes a shell command bunx remotion render NewVideo --log=verbose within the packages/example directory.
  • [REMOTE_CODE_EXECUTION]: There is a clear path to remote code execution because content from a user-controlled external URL is written into a .tsx source file (packages/example/src/NewVideo.tsx) and subsequently executed/rendered by the Remotion tool. This effectively treats external, unverified data as executable code.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Jul 15, 2026, 01:12 PM
Security Audit — agent-trust-hub — video-report