create-short

Pass

Audited by Gen Agent Trust Hub on Oct 29, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes standard command-line interfaces for video production, including npx remotion studio for live previews and npx remotion render for final output. These are official tools provided by the Remotion framework for its intended use case.
  • [EXTERNAL_DOWNLOADS]: Instructions include downloading stock footage from Pexels using curl. Pexels is a well-known service for royalty-free media, and the orientation is correctly restricted to portrait mode for the vertical video format. It also references official documentation and assets from Remotion and ElevenLabs.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided concepts to generate voiceover scripts and background music prompts. While this is an ingestion surface for untrusted data, the skill mitigates risk by requiring explicit user approval of the 'Short Video Plan' before any assets are generated or external APIs are called.
  • [DYNAMIC_EXECUTION]: The pipeline involves generating a local script (scripts/generate-audio.ts) to handle ElevenLabs API interactions. This is a standard developer workflow for Remotion projects, and the instructions provide clear templates for the script's logic, focusing on audio asset management.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 29, 2026, 03:03 PM