remotion-best-practices
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [SAFE]: The skill serves as a high-quality documentation repository for Remotion, providing idiomatic React code for video creation.
- [EXTERNAL_DOWNLOADS]: The instructions facilitate the installation of official Remotion packages and standard utilities (e.g., zod, maplibre-gl, turf) from verified public registries.
- [COMMAND_EXECUTION]: Provides standard CLI examples for developer workflows, including project scaffolding with
create-video, previewing withremotion studio, and media processing viaffmpeg. - [REMOTE_CODE_EXECUTION]: Includes a guide for setting up local audio transcription using the Whisper.cpp library, which involves downloading official models and binaries to a local project directory.
- [PROMPT_INJECTION]: The skill demonstrates patterns for fetching external data to drive video properties (indirect prompt injection surface). This is documented as a core feature for dynamic content generation and follows standard integration patterns.
- Ingestion points:
calculateMetadataandfetchCaptionsexamples inSKILL.mdandrules/display-captions.mdfetch JSON from remote URLs. - Boundary markers: Not explicitly defined in code snippets, as they are generic implementation examples.
- Capability inventory: Use of
fetch,ffmpeg, andnpx remotionfor media rendering and processing. - Sanitization: Not present in the provided architectural examples, reflecting standard framework usage.
Audit Metadata