remotion-best-practices
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were detected. The skill functions as a documentation and template repository for Remotion development.
- [EXTERNAL_DOWNLOADS]: The instructions guide users to install standard, well-known libraries from the NPM registry, such as Remotion-specific packages, Zod, and Mapbox GL. It also references fetching assets from trusted domains like remotion.media and lottiefiles.com.
- [CREDENTIALS_UNSAFE]: The skill correctly instructs users to manage sensitive API keys (e.g., Mapbox, ElevenLabs) via environment variables in
.envfiles, which is an industry-standard security practice. - [COMMAND_EXECUTION]: Provides standard CLI usage for framework-specific tasks like project scaffolding, rendering, and FFmpeg processing. These operations are essential for the skill's purpose and are documented within their legitimate context.
Audit Metadata