stitch-remotion

Pass

Audited by Gen Agent Trust Hub on Mar 21, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill uses curl to fetch screenshot assets from URLs generated by the Stitch project tools. It also utilizes npm and npx to manage the Remotion framework and its dependencies from the official npm registry.
  • [COMMAND_EXECUTION]: The instructions guide the agent to execute shell commands for project initialization, dependency installation, and video rendering. This includes standard usage of npm create, npm install, and npx remotion render.
  • [DATA_EXFILTRATION]: While the skill involves network operations to download image assets, these are directed towards fetching project-specific data necessary for video production. No sensitive user credentials or local system files are accessed or transmitted.
  • [PROMPT_INJECTION]: The skill body includes specific usage constraints to ensure it is only activated for relevant user requests. It contains no instructions that attempt to override the AI agent's core behavior or safety guidelines.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 21, 2026, 02:42 AM
Security Audit — agent-trust-hub — stitch-remotion