remotion-upgrade
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard package management commands such as
npx remotion upgrade,npx remotion skills update, andnpm view remotion version. These are intended for software maintenance and do not involve arbitrary command injection or privilege escalation. - [EXTERNAL_DOWNLOADS]: The skill references the official Remotion documentation website (
remotion.dev) to verify version compatibility. This is a well-known service and the reference is used appropriately for its documented purpose. - [DATA_EXPOSURE]: The agent is instructed to read manifest files (e.g.,
package.json) and lockfiles to identify dependencies. This access is scoped to project configuration and is necessary for performing the requested upgrades.
Audit Metadata