remotion-best-practices

Pass

Audited by Gen Agent Trust Hub on Jul 10, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill contains instructional content for developer workflows using the Remotion framework. It does not contain any malicious patterns, prompt injections, or attempts to bypass safety guidelines.
  • [EXTERNAL_DOWNLOADS]: The skill recommends installing official Remotion ecosystem packages (e.g., @remotion/media, @remotion/captions, @remotion/google-fonts) from npm. It also references fetching assets and documentation from well-known and official domains such as remotion.dev, remotion.media, lottiefiles.com, and maplibre.org.
  • [COMMAND_EXECUTION]: Provides standard command-line instructions for Remotion development, including project initialization via create-video, package management, and video processing using the Remotion CLI wrapper for FFmpeg and FFprobe.
  • [REMOTE_CODE_EXECUTION]: Includes instructions for transcribing audio using @remotion/install-whisper-cpp, which downloads and installs the official Whisper.cpp binary. This is a standard development workflow for this framework.
  • [DATA_EXFILTRATION]: Examples involving fetch in calculateMetadata and TTS generation scripts demonstrate legitimate retrieval of video metadata and audio assets. There is no evidence of sensitive data exfiltration.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 10, 2026, 09:02 AM
Security Audit — agent-trust-hub — remotion-best-practices