Skills
Navigate
skills/qu-skills/superpowers/remotion-render/Gen Agent Trust Hub

remotion-render

Pass

Audited by Gen Agent Trust Hub on Sep 2, 2026

Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill transmits React/Remotion TSX code to the inference.sh cloud service for rendering into MP4 videos. While this involves executing code on a remote system, it is the primary intended functionality of the skill for cloud-based video generation.
  • [COMMAND_EXECUTION]: The skill utilizes the belt CLI tool to interact with the rendering platform. The execution environment is restricted to the belt command via the allowed-tools frontmatter configuration.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests React code through the code input parameter.
  • Ingestion points: The code parameter in SKILL.md examples and schema.
  • Boundary markers: None identified for the code interpolation.
  • Capability inventory: The skill uses the belt CLI for network communication and remote rendering.
  • Sanitization: There is no explicit sanitization shown for the TSX code before it is passed to the rendering service, representing a potential surface if the agent populates this field with untrusted data.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 2, 2026, 02:19 PM
Security Audit — agent-trust-hub — remotion-render