remotion-best-practices
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing various packages from the official Remotion scope (e.g.,
@remotion/three,@remotion/media) as well as well-known libraries likemapbox-gl,@turf/turf, andzod. - [COMMAND_EXECUTION]: Documents the use of video processing tools such as
ffmpegandffprobevia the Remotion CLI (bunx remotion ffmpeg). - [REMOTE_CODE_EXECUTION]: Instructions are provided for utilizing
@remotion/install-whisper-cppwhich downloads and installs thewhisper.cppbinary to enable speech-to-text features. - [INDIRECT_PROMPT_INJECTION]: The skill implements logic to process external data sources including remote Lottie JSON files, AI-generated voiceover, and local
.srtsubtitle files, which constitutes a potential ingestion surface for untrusted data.
Audit Metadata