remotion-video-production
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill accepts arbitrary text prompts from users to define video content, which are then used to generate React code and configuration. Ingestion points: User instructions for video generation (e.g., prompts describing scene content and style). Boundary markers: None identified in the instructions to isolate user input from the generation logic. Capability inventory: The skill uses the 'Bash' tool for command execution and 'Write' for creating local files. Sanitization: No explicit validation or escaping mechanisms are described.
- [DYNAMIC_EXECUTION]: The skill generates TypeScript/React code at runtime based on user requirements and executes it using the Remotion CLI. The 'npx remotion' command is used to preview and render the dynamically generated code. While using a well-known framework, the process of generating and immediately executing code based on user-supplied parameters constitutes a dynamic execution pattern.
Audit Metadata