stitch-remotion

Pass

Audited by Gen Agent Trust Hub on Jul 15, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill includes scripts/download-stitch-asset.sh, which uses curl to download screenshots and assets from external URLs (e.g., Google Cloud Storage). This is a standard functional requirement for the skill's purpose of processing design exports.
  • [COMMAND_EXECUTION]: The workflow utilizes shell scripts and Remotion CLI commands to manage assets and execute the video rendering process.
  • [SAFE]: The skill documentation includes a dedicated 'Anti-Patterns' section that explicitly prohibits the reading, storing, or committing of Stitch API keys, MCP secrets, or other credential-bearing files.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 15, 2026, 06:06 PM
Security Audit — agent-trust-hub — stitch-remotion