remotion-upgrade

Pass

Audited by Gen Agent Trust Hub on Jul 20, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes standard maintenance commands including npx remotion upgrade and npx remotion skills update. These commands are used to manage dependencies within a Remotion project.
  • [EXTERNAL_DOWNLOADS]: The skill references official project documentation at remotion.dev to verify version compatibility and the project's GitHub releases page for changelog information. These well-known sources are used solely for information gathering to guide the upgrade process.
  • [PROMPT_INJECTION]: The skill ingests data from an external source to determine upgrade versions, creating a theoretical indirect injection surface.
  • Ingestion points: https://www.remotion.dev/docs/mediabunny/version (SKILL.md)
  • Boundary markers: Absent
  • Capability inventory: Package manifest modification and shell command execution via npx and the project's package manager.
  • Sanitization: Absent
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 20, 2026, 07:08 AM
Security Audit — agent-trust-hub — remotion-upgrade