remotion-to-hyperframes
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted Remotion source code (.ts, .tsx) during translation, which serves as an ingestion point for external data. To mitigate the risk of embedded instructions influencing the agent, the skill employs a mandatory linting phase that detects and rejects non-seek-driven React idioms (such as useState and side-effectful useEffect). Capabilities like file writing and media rendering are strictly scoped to the migration workflow.\n- [DYNAMIC_EXECUTION]: The skill generates HTML and JavaScript compositions from the source and executes shell scripts containing Python snippets to perform technical evaluation tasks (e.g., SSIM diffing). These dynamic execution patterns are restricted to the skill's primary function of video composition translation and evaluation, following predictable template-driven structures.
Audit Metadata