remotion-editor
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes potentially untrusted content, such as video transcripts and captions. It explicitly mitigates indirect prompt injection by including a prominent warning at the beginning of the skill, instructing the agent to treat such content as analysis material rather than instructions to follow.
- [COMMAND_EXECUTION]: The workflow requires the execution of various shell commands, including
npm run,npx remotion, andpython3. These are standard operations for a development-oriented video editing tool and are used for rendering and transcription tasks. - [EXTERNAL_DOWNLOADS]: The skill suggests using a separate
video-downloaderscript to fetch video files from URLs. Additionally, it utilizesnpx, which may download the Remotion CLI if it is not already present in the environment. These are expected behaviors for the skill's stated purpose of video management.
Audit Metadata