remotion-best-practices

Pass

Audited by Gen Agent Trust Hub on May 18, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
  • [SAFE]: The skill serves as a high-quality documentation repository for Remotion, providing idiomatic React code for video creation.
  • [EXTERNAL_DOWNLOADS]: The instructions facilitate the installation of official Remotion packages and standard utilities (e.g., zod, maplibre-gl, turf) from verified public registries.
  • [COMMAND_EXECUTION]: Provides standard CLI examples for developer workflows, including project scaffolding with create-video, previewing with remotion studio, and media processing via ffmpeg.
  • [REMOTE_CODE_EXECUTION]: Includes a guide for setting up local audio transcription using the Whisper.cpp library, which involves downloading official models and binaries to a local project directory.
  • [PROMPT_INJECTION]: The skill demonstrates patterns for fetching external data to drive video properties (indirect prompt injection surface). This is documented as a core feature for dynamic content generation and follows standard integration patterns.
  • Ingestion points: calculateMetadata and fetchCaptions examples in SKILL.md and rules/display-captions.md fetch JSON from remote URLs.
  • Boundary markers: Not explicitly defined in code snippets, as they are generic implementation examples.
  • Capability inventory: Use of fetch, ffmpeg, and npx remotion for media rendering and processing.
  • Sanitization: Not present in the provided architectural examples, reflecting standard framework usage.
Audit Metadata
Risk Level
SAFE
Analyzed
May 18, 2026, 06:16 AM