remotion-render

Pass

Audited by Gen Agent Trust Hub on Mar 30, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches CLI installation instructions and scripts from the official inference-sh GitHub repository.
  • [COMMAND_EXECUTION]: Uses the infsh CLI tool to execute video rendering operations. The tool is restricted via the allowed-tools frontmatter configuration.
  • [PROMPT_INJECTION]:
  • Ingestion points: The code and props parameters in the input schema within SKILL.md accept arbitrary text and data.
  • Boundary markers: Absent; user-provided code is passed directly to the rendering service.
  • Capability inventory: The skill has the capability to run shell commands using the infsh tool.
  • Sanitization: Not explicitly implemented in the skill instructions; security relies on the sandboxing and validation logic of the inference.sh platform.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 30, 2026, 02:47 AM