remotion-render
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
beltCLI tool to interact with the rendering service. Access is limited to thebeltcommand through theallowed-toolsfrontmatter, ensuring least privilege.- [EXTERNAL_DOWNLOADS]: The skill documentation provides instructions for installing thebelt-sh/cliand refers to theinferenceshPython SDK. These are legitimate tools for the referenced platform.- [REMOTE_CODE_EXECUTION]: The skill is designed to send React TSX code to theinference.shservice for server-side rendering into MP4 files. This remote execution is the primary functionality of the skill.- [INDIRECT_PROMPT_INJECTION]: The skill provides an interface to ingest React code for video generation, creating a potential surface for indirect injection if provided with malicious code. - Ingestion points: The
codeparameter within the input schema inSKILL.md. - Boundary markers: The TSX code is passed as a string value in a JSON payload to the
beltCLI. - Capability inventory: The agent can execute shell commands via the
beltbinary. - Sanitization: No explicit sanitization or validation of the input TSX code is described in the skill documentation.
Audit Metadata