remotion-video
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill instructions and associated scripts do not exhibit any malicious patterns. It is a well-structured tool for video production with Remotion.
- [COMMAND_EXECUTION]: The skill provides bash scripts (scaffold_project.sh, render.sh) to automate project setup and video rendering. These scripts use standard tools like Node.js and npm, following safe practices for command construction.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external data to generate video content. Ingestion points: scripts/render.sh (--props), references/rules/data-driven.md (JSON datasets), and references/rules/media.md (fetch API). Boundary markers: Zod schemas are used in compositions and templates to define expected data structures. Capability inventory: File system writing via render.sh and network access via fetch examples. Sanitization: Zod schema validation is implemented in the templates to ensure data integrity.
- [EXTERNAL_DOWNLOADS]: The skill uses standard package managers to install official Remotion libraries and well-known dependencies like TailwindCSS and Three.js, which are standard for this type of development workflow.
Audit Metadata