remotion-upgrade

Pass

Audited by Gen Agent Trust Hub on Sep 11, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses npx remotion upgrade and npx remotion versions to perform package updates and verify the environment. It also uses npm view remotion version for release checks.
  • [COMMAND_EXECUTION]: Executes npx skills update with a predefined list of Remotion skills, using the --yes flag to automate the update process.
  • [EXTERNAL_DOWNLOADS]: Fetches compatibility data from the official documentation at remotion.dev and references the remotion-dev/remotion GitHub repository for release notes.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from project manifests and external documentation to perform its tasks.
  • Ingestion points: Reads package.json, project lockfiles, and the official Mediabunny compatibility web page.
  • Boundary markers: The skill does not use specific delimiters or instructions to ignore potential commands embedded in the manifest files.
  • Capability inventory: Includes file system reads, package manager execution (npm, npx), and lockfile modifications.
  • Sanitization: The skill relies on the package manager's internal handling of version strings and package names retrieved from the manifests.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 11, 2026, 12:02 AM
Security Audit — agent-trust-hub — remotion-upgrade