remotion-render
Warn
Audited by Socket on Jul 23, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill’s purpose mostly matches its behavior, but it depends on external hosted execution through the Belt CLI, forwards user code and auth to inference.sh, and asks for transitive skill installation. Same-org provenance reduces concern, so this is not malware, but the trust and data-flow footprint is medium risk for a rendering skill.
Confidence: 87%Severity: 58%
Audit Metadata