remotion-render

Warn

Audited by Socket on Jun 19, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s overall behavior matches its stated purpose of remote Remotion rendering, and the primary data flow to inference.sh is expected. However, it relies on a transitive external skill/CLI install, broad Belt command permissions, and remote upload of user code; these are proportionate but raise medium trust and supply-chain concerns rather than indicating clear malicious intent.

Confidence: 85%Severity: 58%
Audit Metadata
Analyzed At
Jun 19, 2026, 02:15 AM
Package URL
pkg:socket/skills-sh/halt-catch-fire%2Fskills%2Fremotion-render%2F@1877d82644a68066923fb8b40375221e9676d65300465f325fd4d1d34982d1f5
Security Audit — socket — remotion-render