remotion-render

Pass

Audited by Gen Agent Trust Hub on Nov 6, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands using the remotion CLI (e.g., npx remotion render). This is the intended core functionality of the skill for video processing and uses the official vendor package.
  • [INDIRECT_PROMPT_INJECTION]: The skill interpolates user-provided arguments, such as composition IDs and file paths, directly into shell commands. This creates a potential surface for indirect prompt injection if a user supplies malicious CLI flags, which is a common characteristic of skills that wrap command-line tools.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 6, 2026, 07:31 AM