remotion-video-creation

Pass

Audited by Gen Agent Trust Hub on Sep 12, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill documents patterns for fetching external data (JSON) from remote APIs to dynamically determine composition properties and metadata. This surface is necessary for the skill's primary purpose of data-driven video generation.
  • Ingestion points: calculateMetadata functions in rules/calculate-metadata.md and rules/compositions.md ingest data from external URLs.
  • Boundary markers: The code examples do not demonstrate the use of delimiters or 'ignore' instructions for the fetched content.
  • Capability inventory: The provided code consists of standard React/Remotion components for video rendering; no arbitrary command execution or unauthorized file access capabilities are present.
  • Sanitization: Data sanitization is not shown in these architectural examples.
  • [EXTERNAL_DOWNLOADS]: The skill includes instructions to install official Remotion utility packages and references assets from well-known services.
  • Fetches Lottie animations from the official LottieFiles domain (assets4.lottiefiles.com) in rules/lottie.md.
  • References sample media from the official Remotion media domain (remotion.media) across multiple rule files.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 12, 2026, 03:41 PM
Security Audit — agent-trust-hub — remotion-video-creation