remotion-to-hyperframes
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes local Python and Bash scripts (
lint_source.py,render_diff.sh,frame_strip.sh) to automate source code analysis and video quality comparison. These scripts leverage standard library functions and common utilities likeffmpegfor processing video frames. All command executions are local and directly serve the skill's purpose of migration and validation. - [EXTERNAL_DOWNLOADS]: The skill manages dependencies using standard package managers (
npm,npx). It references well-known technology services and CDNs (Google Fonts, Cloudflare, unpkg) for assets like GSAP and Lottie libraries, which is standard practice for web-based animation compositions. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted Remotion source code as input. It mitigates potential injection and execution risks through a mandatory linting step (
lint_source.py) that detects and refuses to translate complex React patterns (e.g.,useState,useEffectwith side effects). This ensures that only deterministic, safe animation logic is processed for translation into HTML/GSAP.
Audit Metadata