remotion-production

SUSPICIOUS: the stated purpose matches video-production behavior, but the skill’s core workflow relies on a third-party MCP/KIE layer that may mediate vendor credentials and media data without clearly documented trust boundaries. No confirmed malware or overt exfiltration appears, but data-flow and credential-forwarding risks are higher than a normal Remotion guide.

No direct evidence of intentionally malicious behavior is present. The manual workflow has a credible shell-injection risk because workflow inputs are embedded unquoted in run commands. The pull-request workflow also executes dependency install scripts and project-controlled rendering code on a hosted runner; it should use least-privilege permissions, avoid exposing secrets, and validate or safely quote inputs. Pinning dependencies and avoiding unrestricted npx resolution would further reduce supply-chain risk.