The Agent Skills Directory

[COMMAND_EXECUTION]: Provides instructions for using standard CLI tools such as npx create-video, npx remotion studio, and npx remotion still to manage and preview projects. It also demonstrates how to use npx remotion ffmpeg for non-destructive video trimming and audio processing.
[EXTERNAL_DOWNLOADS]: Fetches framework-specific packages and assets from well-known and trusted domains, including remotion.media, Google Fonts, and api.elevenlabs.io. These operations are aligned with the skill's primary purpose of video creation and font management.
[REMOTE_CODE_EXECUTION]: Utilizes the @remotion/install-whisper-cpp package to download and install a specific version of the Whisper.cpp binary and associated models for transcribing audio into captions.
[CREDENTIALS_UNSAFE]: Includes instructions for integrating the ElevenLabs API for voiceover generation, recommending the use of environment variables (e.g., ELEVENLABS_API_KEY) to manage secrets securely rather than hardcoding them.
[DATA_EXFILTRATION]: Documents the use of fetch within the calculateMetadata lifecycle function to retrieve composition parameters and props from external APIs, which is a standard architectural pattern in Remotion for dynamic video data.
[PROMPT_INJECTION]: The skill identifies an attack surface for indirect prompt injection where external data fetched via calculateMetadata or caption files is interpolated into the component's properties; however, this is a standard framework feature and no malicious exploitation patterns were found.

remotion-best-practices