stitch-remotion
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes
scripts/download-stitch-asset.sh, which usescurlto download screenshots and assets from external URLs (e.g., Google Cloud Storage). This is a standard functional requirement for the skill's purpose of processing design exports. - [COMMAND_EXECUTION]: The workflow utilizes shell scripts and Remotion CLI commands to manage assets and execute the video rendering process.
- [SAFE]: The skill documentation includes a dedicated 'Anti-Patterns' section that explicitly prohibits the reading, storing, or committing of Stitch API keys, MCP secrets, or other credential-bearing files.
Audit Metadata