remotion-render

Warn

Audited by Socket on Jun 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s overall behavior matches its stated purpose of remote Remotion rendering, and the primary data flow to inference.sh is expected. However, it relies on a transitive external skill/CLI install, broad Belt command permissions, and remote upload of user code; these are proportionate but raise medium trust and supply-chain concerns rather than indicating clear malicious intent.

Confidence: 100%Severity: 60%
Audit Metadata
Analyzed At
Jun 14, 2026, 07:06 PM
Package URL
pkg:socket/skills-sh/inference-sh-skills%2Fskills%2Fremotion-render%2F@7c7d866e1b2a2624a978007a465d255982c85421
Security Audit — socket — remotion-render