remotion-to-hyperframes
Pass
Audited by Gen Agent Trust Hub on May 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate code migration functionality. All scripts and references are well-documented and align with the stated purpose of porting Remotion projects to HyperFrames.\n- [DATA_EXPOSURE_&_EXFILTRATION]: No unauthorized data access or exfiltration mechanisms were detected. External resources point to the vendor's own infrastructure (heygen-com) or well-known, trusted services such as Google Fonts and Cloudflare CDNs.\n- [UNVERIFIABLE_DEPENDENCIES_&_REMOTE_CODE_EXECUTION]: Dependencies listed in the test fixtures are standard packages within the React and Remotion ecosystems. The skill executes local build and render scripts (e.g., npm install, ffmpeg) that do not download or execute untrusted remote code.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user-provided Remotion source code during translation.\n
- Ingestion points: Reads
.tsand.tsxfiles via thescripts/lint_source.pytool.\n - Boundary markers: Translates React logic into deterministic HTML markup and GSAP timeline definitions.\n
- Capability inventory: The skill uses local shell commands to perform media processing and rendering tasks.\n
- Sanitization: Includes a linter that explicitly detects and refuses to translate stateful or non-pure React patterns (e.g.,
useState,useEffectwith dependencies) to ensure the safety and determinism of the output.
Audit Metadata