remotion-create
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes command-line tools to initialize projects (npx create-video), manage dependencies (npm i), and run the Remotion studio or renderer. These commands are necessary for the skill's stated purpose of video creation.
- [EXTERNAL_DOWNLOADS]: The skill triggers the download of the Remotion scaffolding tool and project dependencies from the npm registry. These are standard resources for the Remotion ecosystem.
- [INDIRECT_PROMPT_INJECTION]: The skill generates React-based video layouts based on user-provided descriptions. This creates a surface where instructions could be embedded in the prompt to influence the generated code. Ingestion points: user prompts for video design in SKILL.md. Boundary markers: none. Capability inventory: npx, npm, and local file system access. Sanitization: none mentioned.
Audit Metadata