remotion-render
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFE
Full Analysis
- Command Execution: The skill provides documentation for executing
npx remotion renderandnpx remotion still. These commands are standard for the Remotion framework and are used to process video compositions. - External Downloads: The instructions reference the
remotionpackage vianpx, which fetches code from the public npm registry. This is common practice for Node.js development tools and aligns with the tool's official documentation. - Indirect Prompt Injection Consideration: The documentation includes examples of using
calculateMetadatawhich acceptsprops. When implementing these examples, developers should be aware that if these properties are derived from external or untrusted sources, they should be validated to prevent unexpected behavior during the rendering process. Evidence: Data enters viapropsintransparent-videos.md, no explicit boundary markers or sanitization are shown in the snippets, and the skill utilizesnpx remotionsubprocess calls.
Audit Metadata