remotion-marketing-automation
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions and automation scripts that use the Remotion CLI (
npx remotion render) and Node.js rendering APIs to generate video and image files. - [EXTERNAL_DOWNLOADS]: The skill instructions and GitHub Actions workflows include standard dependency management via
npm installto download necessary libraries from the npm registry. - [PROMPT_INJECTION]: The skill describes workflows for ingesting and processing untrusted external data (such as blog metadata, JSON, or CMS content) which is then interpolated into rendering components and shell commands.
- Ingestion points: External data is ingested from Markdown files, JSON sources, and CMS APIs as outlined in SKILL.md and references/AUTOMATION_SCRIPTS.md.
- Boundary markers: Absent; there are no instructions for the agent to use delimiters or ignore instructions potentially embedded in the source data.
- Capability inventory: The skill executes shell commands via the Remotion CLI and performs file operations through Node.js rendering scripts.
- Sanitization: Absent; the provided examples demonstrate direct interpolation of data variables into shell command strings and JSON properties without explicit escaping or validation.
Audit Metadata