remotion-upgrade
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands such as
npx remotion upgradeandnpx skills updateto perform project maintenance and update installed tools. - [EXTERNAL_DOWNLOADS]: The skill interacts with the NPM registry to fetch package metadata via
npm viewand executes remote CLI tools from the vendor usingnpx. - [INDIRECT_PROMPT_INJECTION]: The skill analyzes project manifests and lockfiles, which are external data sources that could theoretically influence agent behavior.
- Ingestion points: Project manifests (e.g.,
package.json) and lockfiles located within the project directory. - Boundary markers: None provided to separate untrusted data from instructions.
- Capability inventory: Shell command execution capabilities are utilized to run update scripts.
- Sanitization: No explicit sanitization of project data is performed before processing.
Audit Metadata