remotion-docs
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFECREDENTIALS_UNSAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [CREDENTIALS_UNSAFE]: The file
SKILL.mdcontains hardcoded Algolia credentials (API key3e42dbd4f895fe93ff5cf40d860c4a85and Application IDPLSDUOL1CA) to facilitate documentation searching. - [EXTERNAL_DOWNLOADS]: The skill instructions direct the agent to fetch documentation content from the vendor's domain
www.remotion.devand perform search operations viaalgolia.net. - [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves fetching and processing external markdown data, which constitutes a vulnerability surface for indirect prompt injection.
- Ingestion points: Documentation pages retrieved from
https://www.remotion.dev/docs/*.mdinSKILL.md. - Boundary markers: Absent. No delimiters or specific safety instructions are provided to help the agent manage external data.
- Capability inventory: The instructions suggest the agent implement logic based on documentation, which could involve any tools available to the agent.
- Sanitization: Absent. No validation or filtering mechanisms are described for the fetched content.
Audit Metadata