remotion-markup

Pass

Audited by Gen Agent Trust Hub on Jul 26, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill uses standard commands such as npx remotion add to install legitimate @remotion/* packages and other reputable libraries like zod, mapbox-gl, and maplibre-gl.
  • [SAFE]: External asset references (media files, Lottie JSON) target well-known and relevant domains such as remotion.media and lottiefiles.com.
  • [SAFE]: Sensitive configuration data, such as API keys for Mapbox and ElevenLabs, are handled using environment variables (process.env.REMOTION_MAPBOX_TOKEN, process.env.ELEVENLABS_API_KEY) rather than being hardcoded, following security best practices.
  • [SAFE]: Command execution within the skill is limited to standard Remotion CLI operations (npx remotion studio, npx remotion render, npx remotion ffmpeg) intended for local development and media processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 26, 2026, 09:27 AM
Security Audit — agent-trust-hub — remotion-markup