remotion-render
Pass
Audited by Gen Agent Trust Hub on Mar 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches CLI installation instructions and scripts from the official inference-sh GitHub repository.
- [COMMAND_EXECUTION]: Uses the
infshCLI tool to execute video rendering operations. The tool is restricted via theallowed-toolsfrontmatter configuration. - [PROMPT_INJECTION]:
- Ingestion points: The
codeandpropsparameters in the input schema withinSKILL.mdaccept arbitrary text and data. - Boundary markers: Absent; user-provided code is passed directly to the rendering service.
- Capability inventory: The skill has the capability to run shell commands using the
infshtool. - Sanitization: Not explicitly implemented in the skill instructions; security relies on the sandboxing and validation logic of the inference.sh platform.
Audit Metadata