remotion-best-practices
Pass
Audited by Gen Agent Trust Hub on Aug 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFE
Full Analysis
- [CREDENTIALS_UNSAFE]: The documentation search module includes a hardcoded search-only API key and application ID for Algolia.
- File:
remotion-docs/REFERENCE.md - Evidence:
x-algolia-api-key=3e42dbd4f895fe93ff5cf40d860c4a85andx-algolia-application-id=PLSDUOL1CA - Purpose: These credentials are used to allow the AI agent to programmatically search the official Remotion documentation index.
- [EXTERNAL_DOWNLOADS]: The skill facilitates the download and installation of several external resources required for its features:
- Installation of the
Whisper.cppbinary and speech models via the@remotion/install-whisper-cpppackage inremotion-captions/transcribe-captions.md. - Loading of the CesiumJS library from a CDN for 3D flyover rendering.
- Fetching of animation data from LottieFiles and sound effects from the vendor's asset server (
remotion.media). - [COMMAND_EXECUTION]: The skill provides instructions for executing various command-line operations standard to the framework's workflow:
- Video rendering and still generation commands (
npx remotion render,npx remotion still). - Multimedia processing via
npx remotion ffmpegandnpx remotion ffprobe. - Local Node.js scripts for geospatial data preparation (
prep-geo.mjs,prep-cesium-path.mjs) which use thefsmodule to process local GeoJSON files. - Skill lifecycle management using
npx skills updateto keep the agent's instructions current.
Audit Metadata