remotion-render
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
beltCLI tool to execute remote application runs on theinference.shplatform. - [EXTERNAL_DOWNLOADS]: The skill references and fetches configuration guidelines and additional skills from the
inference-shorganization on GitHub, which is the official repository for the platform's tooling. - [DYNAMIC_EXECUTION]: The skill's primary function is to render user-provided React/Remotion component code (
codeparameter) into video files. This execution occurs within the remoteinference.shinfrastructure. - [INDIRECT_PROMPT_INJECTION]: The skill defines an attack surface for indirect injection by ingesting untrusted TSX code and props.
- Ingestion points: The
codeandpropsfields in the input schema for theremotion-renderapp. - Boundary markers: No explicit markers or instructions to ignore embedded commands are present in the skill definition.
- Capability inventory: The skill uses the
beltCLI tool to transmit data to a remote rendering service; it does not directly perform local file writes or arbitrary shell execution outside of the limitedbeltscope. - Sanitization: No specific sanitization or validation logic for the input TSX code is documented in the skill instructions.
Audit Metadata