remotion-render
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands using the
remotionCLI (e.g.,npx remotion render). This is the intended core functionality of the skill for video processing and uses the official vendor package. - [INDIRECT_PROMPT_INJECTION]: The skill interpolates user-provided arguments, such as composition IDs and file paths, directly into shell commands. This creates a potential surface for indirect prompt injection if a user supplies malicious CLI flags, which is a common characteristic of skills that wrap command-line tools.
Audit Metadata