remotion

Pass

Audited by Gen Agent Trust Hub on Sep 27, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes shell commands via npm and npx to initialize Remotion projects, install animation dependencies, and perform the final video rendering operations.
  • [EXTERNAL_DOWNLOADS]: Downloads design assets (screenshots) and HTML metadata from the Stitch platform. It also retrieves standard libraries from the npm registry and references official developer repositories for architectural guidance.
  • [DYNAMIC_EXECUTION]: Generates React and TypeScript source code at runtime to build video compositions, using metadata and structure retrieved from external design projects.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external designs to generate video content, creating a potential surface for indirect prompt injection.
  • Ingestion points: stitch:list_screens, stitch:get_screen, and web_fetch for downloading project screenshots and HTML code.
  • Boundary markers: The skill organizes retrieved data into a screens.json manifest, though it lacks explicit instructions to the agent to disregard instructions potentially embedded within the design text.
  • Capability inventory: Bash (shell execution), Write (file creation for components and manifests), web_fetch (network requests).
  • Sanitization: No explicit sanitization or escaping steps are defined for text extracted from the Stitch HTML before it is interpolated into the React components.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 27, 2026, 12:29 PM