remotion-docs
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFECREDENTIALS_UNSAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [CREDENTIALS_UNSAFE]: The file
SKILL.mdcontains a hardcoded Algolia search-only API key (3e42dbd4f895fe93ff5cf40d860c4a85) and Application ID (PLSDUOL1CA) required to query the Remotion documentation index. - [INDIRECT_PROMPT_INJECTION]: The skill allows for the ingestion of untrusted external content that could contain malicious instructions.
- Ingestion points: Documentation pages retrieved from
www.remotion.devwith a.mdsuffix. - Boundary markers: The skill lacks explicit delimiters or instructions to disregard any embedded prompts found within the fetched documentation.
- Capability inventory: The agent is instructed to implement features using the current documentation content, providing a channel for retrieved instructions to influence agent actions.
- Sanitization: No validation or sanitization is performed on the Markdown content before it is processed by the agent.
Audit Metadata