remotion-best-practices
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches framework documentation from
remotion.devand documentation search results fromalgolia.net. Integrates with well-known services for mapping (maptiler.com,mapbox.com,googleapis.com), text-to-speech (elevenlabs.io), and animations (lottiefiles.com). Downloads AI models from Hugging Face for transcription functionality and framework packages via standard Node.js package managers. - [COMMAND_EXECUTION]: Provides instructions for executing standard Remotion CLI commands for project management, local preview servers (
remotion studio), rendering (remotion render), and media processing (remotion ffmpeg,remotion ffprobe). - [CREDENTIALS_UNSAFE]: Includes a public search-only Algolia API key in
remotion-docs/REFERENCE.mdto facilitate documentation searches. This is a standard public key for documentation indexing and does not pose a risk to the user environment. - [SAFE]: No malicious patterns, obfuscation, or data exfiltration attempts were detected. The skill follows security best practices by recommending environment variables for sensitive user credentials like Mapbox or ElevenLabs API keys. The use of zero-width joiner characters in
arabic-text.mdis for legitimate RTL text rendering purposes.
Audit Metadata