remotion-to-hyperframes
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and fetches animation libraries from well-known services such as Cloudflare (cdnjs) and Unpkg. These are used to support GSAP and Lottie animations in the generated HyperFrames compositions.
- [INDIRECT_PROMPT_INJECTION]: As the skill is designed to ingest and translate user-provided Remotion source code, it possesses an attack surface for indirect injection. However, it implements a robust defensive layer via
scripts/lint_source.py, which identifies and blocks non-deterministic React patterns (likeuseState,useEffectwith dependencies, and third-party UI libraries) before any translation occurs. - [COMMAND_EXECUTION]: The skill uses a suite of local Python and Bash scripts (
lint_source.py,render_diff.sh,frame_strip.sh) to analyze source code and perform visual validation of rendered videos. These scripts are strictly scoped to the translation and evaluation workflow.
Audit Metadata