remotion-multimedia
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the
mediabunnylibrary and its documentation atmediabunny.dev. It also includes examples that fetch sample media files fromremotion.media. These are identified as resources associated with the developer's infrastructure and the primary purpose of the skill. - [INDIRECT_PROMPT_INJECTION]: The skill ingests external media files, which creates a potential surface for indirect prompt injection through file metadata.
- Ingestion points:
UrlSource,FilePathSource, andBlobSourceingest data from external sources inget-audio-duration.md,get-video-dimensions.md, andget-video-duration.md. - Boundary markers: No specific boundary markers are used to separate external data from the agent's instructions.
- Capability inventory: The skill is limited to extracting numeric metadata (duration, width, height) using
computeDurationandgetPrimaryVideoTrack. - Sanitization: The skill depends on the internal parsing logic of the
mediabunnylibrary; since the output is restricted to numeric values, the risk of instructions influencing the agent is negligible.
Audit Metadata