remotion-captions
Pass
Audited by Gen Agent Trust Hub on Aug 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install official packages including
@remotion/captionsand@remotion/install-whisper-cppusing standard package managers (npx, bunx, yarn, pnpm). - [REMOTE_CODE_EXECUTION]: Downloads and executes the
whisper.cppbinary via the official@remotion/install-whisper-cpputility to perform audio transcription. This is a primary function of the skill and uses versioned downloads. - [COMMAND_EXECUTION]: Uses shell commands through
remotion addto configure the development environment and install necessary plugins. - [DATA_EXFILTRATION]: Provides functionality to fetch subtitle (.srt) files from remote URLs for parsing and rendering within the Remotion video component.
- [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection as it processes untrusted external data (SRT files and remote JSON) without explicit sanitization markers.
- Ingestion points:
fetch(staticFile('subtitles.srt'))and remote URL fetching inimport-srt-captions.md. - Boundary markers: Absent; there are no instructions to ignore embedded commands within the subtitle text.
- Capability inventory: Includes file system writes (
fs.writeFileSync) and binary execution (transcribe()). - Sanitization: Not implemented; the skill parses raw text input from subtitle files directly into the component state.
Audit Metadata