remotion-upgrade
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
npx remotion upgradeandnpx remotion versionsto perform package updates and verify the environment. It also usesnpm view remotion versionfor release checks. - [COMMAND_EXECUTION]: Executes
npx skills updatewith a predefined list of Remotion skills, using the--yesflag to automate the update process. - [EXTERNAL_DOWNLOADS]: Fetches compatibility data from the official documentation at
remotion.devand references theremotion-dev/remotionGitHub repository for release notes. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from project manifests and external documentation to perform its tasks.
- Ingestion points: Reads
package.json, project lockfiles, and the official Mediabunny compatibility web page. - Boundary markers: The skill does not use specific delimiters or instructions to ignore potential commands embedded in the manifest files.
- Capability inventory: Includes file system reads, package manager execution (
npm,npx), and lockfile modifications. - Sanitization: The skill relies on the package manager's internal handling of version strings and package names retrieved from the manifests.
Audit Metadata