remotion
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads project assets (screenshots and HTML) from
storage.googleapis.com. This is handled by a shell script that usescurl. These operations target a well-known service and are necessary for the skill's function. - [COMMAND_EXECUTION]: The skill uses
npmto set up the video project and install official Remotion libraries like@remotion/transitions. It also executes shell commands for directory management and rendering. - [DYNAMIC_EXECUTION]: The agent generates TypeScript React components from provided templates to define the video composition. These generated scripts are then executed locally by the Remotion rendering engine.
- [INDIRECT_PROMPT_INJECTION]: The skill extracts text and metadata from Stitch design projects to create video annotations. This creates a surface for indirect prompt injection if the design files contain malicious instructions, though this risk is mitigated by the use of structured data and the primary purpose of the tool.
Audit Metadata