remotion-video

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.80). The skill includes explicit instructions (the "Companion check") to run local shell commands and install companion skills — actions unrelated to the Remotion video authoring purpose that could expose local filesystem state or modify the environment, so this is a prompt-injection risk.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs the agent at runtime to install remote code via the command "npx skills add AbsolutelySkilled/AbsolutelySkilled --skill remotion-video" (and a variant with --skill ); running this npx install would fetch and execute third-party code which can change agent behavior or run code, so it is a high-risk runtime external dependency.