remotion
Warn
Audited by Gen Agent Trust Hub on Nov 13, 2026
Risk Level: MEDIUMDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [DYNAMIC_EXECUTION]: The skill generates React TypeScript components (.tsx files) at runtime based on external project metadata and随后 executes this code using the Remotion CLI to render video files.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and parse HTML content from external Stitch project URLs to automatically generate video annotations and callouts, which could be exploited to influence the agent's behavior if the source project is malicious.
- Ingestion points: htmlCode.downloadUrl mentioned in Step 3 of retrieval.
- Boundary markers: None identified in the prompt templates.
- Capability inventory: Bash (for npx/npm/curl), Write (for file generation).
- Sanitization: No sanitization or escaping of the parsed HTML content is specified before interpolation into components.
- [COMMAND_EXECUTION]: Uses shell commands via the Bash tool for environment setup (npm create), dependency management (npm install), and triggering the video rendering process (npx remotion).
- [EXTERNAL_DOWNLOADS]: Fetches screenshots and HTML metadata from Stitch project URLs and installs packages and additional agent skills from the Remotion development organization on GitHub and the npm registry.
Audit Metadata