remotion
Pass
Audited by Gen Agent Trust Hub on May 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill promotes developer best practices, such as suggesting relative paths for file uploads to comply with CLI security policies and performing keyframe verification before full video rendering to ensure quality and safety.
- [COMMAND_EXECUTION]: The skill utilizes standard command-line operations for React development and video processing, including environment setup with
npmandnpx, and media processing withffmpeg. - [EXTERNAL_DOWNLOADS]: Project scaffolding and dependencies are fetched from the official npm registry. This is a well-known and trusted service in the JavaScript ecosystem, used here for standard package management.
- [DATA_EXFILTRATION]: The skill includes integration with Lark Drive for file delivery. Lark is a well-known enterprise collaboration platform by ByteDance, and the network operations described are part of the intended project delivery workflow.
Audit Metadata