remotion-captions
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes official Node.js packages (@remotion/captions, @remotion/whisper-webgpu) and standard libraries (@huggingface/transformers) for its functionality. Machine learning models are fetched from Hugging Face repositories.
- [INDIRECT_PROMPT_INJECTION]: The skill has the capability to ingest and parse subtitle data from external sources, which is a standard feature for captioning tools.
- Ingestion points: The import-srt-captions.md file describes using fetch() to load .srt files from local or remote URLs.
- Boundary markers: No specific delimiters or safety instructions are provided to the model regarding the content of the SRT files.
- Capability inventory: The skill uses file-writing operations and React rendering to process and display the parsed data.
- Sanitization: Data processing is handled by the parseSrt utility within the @remotion/captions package.
Audit Metadata