remotion-multimedia

Pass

Audited by Gen Agent Trust Hub on Nov 8, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references the mediabunny library and its documentation at mediabunny.dev. It also includes examples that fetch sample media files from remotion.media. These are identified as resources associated with the developer's infrastructure and the primary purpose of the skill.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests external media files, which creates a potential surface for indirect prompt injection through file metadata.
  • Ingestion points: UrlSource, FilePathSource, and BlobSource ingest data from external sources in get-audio-duration.md, get-video-dimensions.md, and get-video-duration.md.
  • Boundary markers: No specific boundary markers are used to separate external data from the agent's instructions.
  • Capability inventory: The skill is limited to extracting numeric metadata (duration, width, height) using computeDuration and getPrimaryVideoTrack.
  • Sanitization: The skill depends on the internal parsing logic of the mediabunny library; since the output is restricted to numeric values, the risk of instructions influencing the agent is negligible.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 8, 2026, 06:24 PM