skills/openai/plugins/remotion-render/Gen Agent Trust Hub

remotion-render

Pass

Audited by Gen Agent Trust Hub on Sep 6, 2026

Risk Level: SAFE
Full Analysis
  • Command Execution: The skill provides documentation for executing npx remotion render and npx remotion still. These commands are standard for the Remotion framework and are used to process video compositions.
  • External Downloads: The instructions reference the remotion package via npx, which fetches code from the public npm registry. This is common practice for Node.js development tools and aligns with the tool's official documentation.
  • Indirect Prompt Injection Consideration: The documentation includes examples of using calculateMetadata which accepts props. When implementing these examples, developers should be aware that if these properties are derived from external or untrusted sources, they should be validated to prevent unexpected behavior during the rendering process. Evidence: Data enters via props in transparent-videos.md, no explicit boundary markers or sanitization are shown in the snippets, and the skill utilizes npx remotion subprocess calls.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 6, 2026, 11:18 AM
Security Audit — agent-trust-hub — remotion-render