remotion-best-practices

Fail

Audited by Snyk on Oct 20, 2026

Risk Level: HIGH
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (low risk: 0.10). The workflow reads documentation from Algolia search and fetches remote Markdown files from www.remotion.dev, which is an active search/fetch of external web content.

HIGH W008: Secret detected in skill content (API keys, tokens, passwords).

  • Secret detected (high risk: 1.00). The documentation contains an Algolia search API URL with an embedded API key (3e42dbd4f895fe93ff5cf40d860c4a85) in remotion-docs/REFERENCE.md:15. This is a high-entropy literal credential string that provides access to an external search index service.

Issues (2)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

W008
HIGH

Secret detected in skill content (API keys, tokens, passwords).

Audit Metadata
Risk Level
HIGH
Analyzed
Oct 20, 2026, 01:27 AM
Issues
2