remotion-best-practices
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill contains instructional content for developer workflows using the Remotion framework. It does not contain any malicious patterns, prompt injections, or attempts to bypass safety guidelines.
- [EXTERNAL_DOWNLOADS]: The skill recommends installing official Remotion ecosystem packages (e.g.,
@remotion/media,@remotion/captions,@remotion/google-fonts) from npm. It also references fetching assets and documentation from well-known and official domains such asremotion.dev,remotion.media,lottiefiles.com, andmaplibre.org. - [COMMAND_EXECUTION]: Provides standard command-line instructions for Remotion development, including project initialization via
create-video, package management, and video processing using the Remotion CLI wrapper for FFmpeg and FFprobe. - [REMOTE_CODE_EXECUTION]: Includes instructions for transcribing audio using
@remotion/install-whisper-cpp, which downloads and installs the official Whisper.cpp binary. This is a standard development workflow for this framework. - [DATA_EXFILTRATION]: Examples involving
fetchincalculateMetadataand TTS generation scripts demonstrate legitimate retrieval of video metadata and audio assets. There is no evidence of sensitive data exfiltration.
Audit Metadata