remotion-docs

Pass

Audited by Gen Agent Trust Hub on Oct 24, 2026

Risk Level: SAFECREDENTIALS_UNSAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [CREDENTIALS_UNSAFE]: The file SKILL.md contains hardcoded Algolia credentials (API key 3e42dbd4f895fe93ff5cf40d860c4a85 and Application ID PLSDUOL1CA) to facilitate documentation searching.
  • [EXTERNAL_DOWNLOADS]: The skill instructions direct the agent to fetch documentation content from the vendor's domain www.remotion.dev and perform search operations via algolia.net.
  • [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves fetching and processing external markdown data, which constitutes a vulnerability surface for indirect prompt injection.
  • Ingestion points: Documentation pages retrieved from https://www.remotion.dev/docs/*.md in SKILL.md.
  • Boundary markers: Absent. No delimiters or specific safety instructions are provided to help the agent manage external data.
  • Capability inventory: The instructions suggest the agent implement logic based on documentation, which could involve any tools available to the agent.
  • Sanitization: Absent. No validation or filtering mechanisms are described for the fetched content.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 24, 2026, 03:43 AM