remotion-create
Pass
Audited by Gen Agent Trust Hub on Jul 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands using
npx create-videoandnpx remotion studioto scaffold a new project and start a local preview server. - [EXTERNAL_DOWNLOADS]: Uses
npxto fetch the latest version of thecreate-videopackage andremotionCLI directly from the NPM registry at runtime. - [PROMPT_INJECTION]: The skill accepts a user-provided project name which is interpolated into a shell command (
npx create-video ... my-video). - Ingestion points: Project name provided by the user (SKILL.md).
- Boundary markers: None explicitly defined in the shell command template.
- Capability inventory: Subprocess execution via shell (SKILL.md).
- Sanitization: None specified; relies on the agent or environment to sanitize the project name string.
Audit Metadata