create-short
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard command-line interfaces for video production, including
npx remotion studiofor live previews andnpx remotion renderfor final output. These are official tools provided by the Remotion framework for its intended use case. - [EXTERNAL_DOWNLOADS]: Instructions include downloading stock footage from Pexels using
curl. Pexels is a well-known service for royalty-free media, and the orientation is correctly restricted to portrait mode for the vertical video format. It also references official documentation and assets from Remotion and ElevenLabs. - [INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided concepts to generate voiceover scripts and background music prompts. While this is an ingestion surface for untrusted data, the skill mitigates risk by requiring explicit user approval of the 'Short Video Plan' before any assets are generated or external APIs are called.
- [DYNAMIC_EXECUTION]: The pipeline involves generating a local script (
scripts/generate-audio.ts) to handle ElevenLabs API interactions. This is a standard developer workflow for Remotion projects, and the instructions provide clear templates for the script's logic, focusing on audio asset management.
Audit Metadata