remotion-video-builder

Pass

Audited by Gen Agent Trust Hub on Jun 18, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the agent to use npx for scaffolding projects (create-video@latest), adding official Remotion skills (remotion-dev/skills), and running the Remotion MCP server (@remotion/mcp@latest). These resources originate from the official and well-known Remotion development organization.
  • [DATA_EXFILTRATION]: Documentation in references/millrace-launch-video.md contains absolute local file paths from the author's workstation (e.g., /Users/timinator/Desktop/TODO/). While this leaks information about the author's environment, it does not involve the exfiltration of user data.
  • [COMMAND_EXECUTION]: The skill provides standard command-line patterns for rendering Remotion videos and stills (e.g., npx remotion render MyComp), which is the expected behavior for this toolset.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 18, 2026, 11:58 AM
Security Audit — agent-trust-hub — remotion-video-builder