remotion-best-practices

Pass

Audited by Gen Agent Trust Hub on Sep 13, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing numerous official Remotion packages and standard libraries (e.g., @remotion/media, zod, mapbox-gl) using package managers like npm, yarn, and pnpm.
  • [EXTERNAL_DOWNLOADS]: The rules/transcribe-captions.md file contains code to download and install the whisper.cpp binary and models using the @remotion/install-whisper-cpp package for transcription purposes.
  • [COMMAND_EXECUTION]: The skill guides users to execute shell commands for package installation, FFmpeg operations, and running generation scripts (e.g., generate-voiceover.ts). These commands are standard for the described video creation workflows.
  • [CREDENTIALS_SAFE]: The skill encourages best practices for secret management by instructing users to store API keys (Mapbox, ElevenLabs) in .env files or environment variables rather than hardcoding them.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 13, 2026, 12:09 AM
Security Audit — agent-trust-hub — remotion-best-practices