remotion
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes shell commands via
npmandnpxto initialize Remotion projects, install animation dependencies, and perform the final video rendering operations. - [EXTERNAL_DOWNLOADS]: Downloads design assets (screenshots) and HTML metadata from the Stitch platform. It also retrieves standard libraries from the npm registry and references official developer repositories for architectural guidance.
- [DYNAMIC_EXECUTION]: Generates React and TypeScript source code at runtime to build video compositions, using metadata and structure retrieved from external design projects.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external designs to generate video content, creating a potential surface for indirect prompt injection.
- Ingestion points:
stitch:list_screens,stitch:get_screen, andweb_fetchfor downloading project screenshots and HTML code. - Boundary markers: The skill organizes retrieved data into a
screens.jsonmanifest, though it lacks explicit instructions to the agent to disregard instructions potentially embedded within the design text. - Capability inventory:
Bash(shell execution),Write(file creation for components and manifests),web_fetch(network requests). - Sanitization: No explicit sanitization or escaping steps are defined for text extracted from the Stitch HTML before it is interpolated into the React components.
Audit Metadata