remotion-docs

Pass

Audited by Gen Agent Trust Hub on Aug 2, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches documentation search results from Algolia and Markdown content from the official remotion.dev domain. These are well-known and trusted sources associated with the skill developer.
  • [CREDENTIALS_UNSAFE]: Includes a hardcoded Algolia public search API key (3e42dbd4f895fe93ff5cf40d860c4a85). This is a public search key intended for client-side search functionality and does not represent a sensitive credential exposure.
  • [PROMPT_INJECTION]: The skill ingests untrusted data from external sources, presenting a surface for indirect prompt injection.
  • Ingestion points: Algolia search API responses and documentation pages from www.remotion.dev (SKILL.md).
  • Boundary markers: The skill does not provide explicit instructions or delimiters to the agent for segregating external content from system instructions.
  • Capability inventory: The agent is tasked with selecting URLs, fetching content, and implementing code based on the documentation (SKILL.md).
  • Sanitization: No sanitization or validation of the remote Markdown content is performed before processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 2, 2026, 11:56 PM
Security Audit — agent-trust-hub — remotion-docs