remotion-video-production

Pass

Audited by Gen Agent Trust Hub on Jun 23, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to use the Bash tool to run npx remotion preview and npx remotion render. These are standard commands for the Remotion framework used to visualize and export video files.
  • [PROMPT_INJECTION]: The skill involves an indirect prompt injection surface as it ingests untrusted user text to generate video scene plans and React code templates. While this is the primary purpose of the skill, it relies on the underlying LLM's safety filters to handle potentially malicious input description.
  • Ingestion points: User-provided prompts describing video content (e.g., in the 'Examples' section).
  • Boundary markers: None explicitly defined in the templates to separate user data from instructions.
  • Capability inventory: The skill uses Bash for command execution and Write for file creation.
  • Sanitization: No explicit sanitization or validation of the input text is performed before it is used to structure the video compositions.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 23, 2026, 09:37 PM
Security Audit — agent-trust-hub — remotion-video-production