remotion-best-practices
Fail
Audited by Snyk on Oct 20, 2026
Risk Level: HIGH
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). The workflow reads documentation from Algolia search and fetches remote Markdown files from
www.remotion.dev, which is an active search/fetch of external web content.
HIGH W008: Secret detected in skill content (API keys, tokens, passwords).
- Secret detected (high risk: 1.00). The documentation contains an Algolia search API URL with an embedded API key (
3e42dbd4f895fe93ff5cf40d860c4a85) inremotion-docs/REFERENCE.md:15. This is a high-entropy literal credential string that provides access to an external search index service.
Issues (2)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
W008
HIGHSecret detected in skill content (API keys, tokens, passwords).
Audit Metadata