stitch-remotion
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill retrieves screenshots and HTML assets from Stitch, a service hosted by Google. It also instructs the installation of standard video processing libraries from the official npm registry and references well-known documentation from Remotion.
- [COMMAND_EXECUTION]: The skill utilizes the 'Bash' tool to execute standard project initialization and rendering commands. This includes using 'npm' for package management and 'npx' for the Remotion CLI, which is necessary for the programmatic generation of video files.
- [REMOTE_CODE_EXECUTION]: The skill references the official Remotion skills repository to add animation patterns via 'npx'. Since this source is an established and well-known technology provider, the activity is consistent with standard development practices.
- [DATA_EXFILTRATION]: No unauthorized data transmission or exfiltration patterns were detected. Network operations are limited to authenticated retrieval of project assets and standard package management interactions.
Audit Metadata