remotion-best-practices

Pass

Audited by Gen Agent Trust Hub on Aug 2, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFE
Full Analysis
  • [CREDENTIALS_UNSAFE]: The documentation search module includes a hardcoded search-only API key and application ID for Algolia.
  • File: remotion-docs/REFERENCE.md
  • Evidence: x-algolia-api-key=3e42dbd4f895fe93ff5cf40d860c4a85 and x-algolia-application-id=PLSDUOL1CA
  • Purpose: These credentials are used to allow the AI agent to programmatically search the official Remotion documentation index.
  • [EXTERNAL_DOWNLOADS]: The skill facilitates the download and installation of several external resources required for its features:
  • Installation of the Whisper.cpp binary and speech models via the @remotion/install-whisper-cpp package in remotion-captions/transcribe-captions.md.
  • Loading of the CesiumJS library from a CDN for 3D flyover rendering.
  • Fetching of animation data from LottieFiles and sound effects from the vendor's asset server (remotion.media).
  • [COMMAND_EXECUTION]: The skill provides instructions for executing various command-line operations standard to the framework's workflow:
  • Video rendering and still generation commands (npx remotion render, npx remotion still).
  • Multimedia processing via npx remotion ffmpeg and npx remotion ffprobe.
  • Local Node.js scripts for geospatial data preparation (prep-geo.mjs, prep-cesium-path.mjs) which use the fs module to process local GeoJSON files.
  • Skill lifecycle management using npx skills update to keep the agent's instructions current.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 2, 2026, 11:57 PM
Security Audit — agent-trust-hub — remotion-best-practices