remotion-video-creation
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill documents patterns for fetching external data (JSON) from remote APIs to dynamically determine composition properties and metadata. This surface is necessary for the skill's primary purpose of data-driven video generation.
- Ingestion points:
calculateMetadatafunctions inrules/calculate-metadata.mdandrules/compositions.mdingest data from external URLs. - Boundary markers: The code examples do not demonstrate the use of delimiters or 'ignore' instructions for the fetched content.
- Capability inventory: The provided code consists of standard React/Remotion components for video rendering; no arbitrary command execution or unauthorized file access capabilities are present.
- Sanitization: Data sanitization is not shown in these architectural examples.
- [EXTERNAL_DOWNLOADS]: The skill includes instructions to install official Remotion utility packages and references assets from well-known services.
- Fetches Lottie animations from the official LottieFiles domain (assets4.lottiefiles.com) in
rules/lottie.md. - References sample media from the official Remotion media domain (remotion.media) across multiple rule files.
Audit Metadata