remotion-to-hyperframes
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes shell scripts (
run.sh,render_diff.sh,frame_strip.sh) and Python scripts (lint_source.py) to automate the translation and validation workflow. These scripts invoke standard system utilities such asffmpeg,ffprobe,npm, andnodeto process video files and manage project dependencies. - [EXTERNAL_DOWNLOADS]: The skill references external assets from well-known and trusted sources, including Google Fonts (
fonts.googleapis.com) and GSAP via CDNJS (cdnjs.cloudflare.com). These references are used within generated HTML templates for legitimate web development purposes. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted Remotion source code for translation, which represents an indirect prompt injection surface.
- Ingestion points: The skill reads Remotion
.tsxand.tssource files provided by the user. - Boundary markers: A dedicated linter (
lint_source.py) is used to detect and block non-deterministic or unsafe React patterns. - Capability inventory: The environment executes shell and Python scripts for linting and rendering.
- Sanitization: The linter enforces strict mapping rules, effectively sanitizing the input by refusing to translate complex state-driven logic.
Audit Metadata