remotion
Pass
Audited by Gen Agent Trust Hub on May 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to download and execute external binaries and fetch remote assets.
rules/transcribe-captions.mdprovides a Node.js script using the@remotion/install-whisper-cpppackage to download and install thewhisper.cppbinary (version 1.5.5) to the project directory.rules/lottie.mdfetches animation data fromhttps://assets4.lottiefiles.com/packages/lf20_zyquagfl.json.rules/voiceover.mdfetches audio from the ElevenLabs API (https://api.elevenlabs.io/v1/text-to-speech/).- [PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection (Category 8) by processing untrusted data.
- Ingestion points:
rules/calculate-metadata.mdfetches JSON from a user-providedprops.dataUrl.rules/compositions.mdfetches video metadata from an external API based onprops.videoId.rules/lottie.mdandrules/display-captions.mdfetch and parse external JSON content. - Boundary markers: No specific boundary markers or "ignore embedded instructions" warnings are used for content fetched from remote URLs.
- Capability inventory: The skill provides templates for writing files to the local disk (
fs.writeFileSyncinrules/transcribe-captions.mdandrules/voiceover.md) and executing CLI-based video rendering commands. - Sanitization: While
rules/parameters.mdintroduceszodfor prop schema validation, the examples for fetching external data do not include validation of the fetched payload's structure or content before use in the video composition.
Audit Metadata