remotion-scaffold
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided project requirements to generate file system structures and component templates, which presents a surface for potential injection.
- Ingestion points: Project names, scene titles, and asset requirements provided by the user in natural language or structured formats as defined in the Input/Output Formats section of SKILL.md.
- Boundary markers: The skill does not instruct the agent to use delimiters or specific safety prompts to isolate user-provided data from the code generation instructions.
- Capability inventory: The skill utilizes the agent's ability to create directories and write TypeScript files (index.tsx, constants.ts, etc.) based on user-controlled inputs.
- Sanitization: There are no instructions to sanitize, escape, or validate user-provided strings before they are interpolated into file paths or exported component names.
Audit Metadata