remotion-upgrade
Pass
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: SAFE
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill executes the
remotionpackage usingnpxto automate the upgrade process. This is a standard and expected operation for the vendor-authored tool. - [COMMAND_EXECUTION]: Employs shell commands such as
npm viewto retrieve the latest version information andnpx remotion versionsto audit the project's dependency state. - [EXTERNAL_DOWNLOADS]: Retrieves compatibility data from the official vendor website at
remotion.devto ensure correctly matched versions of the Mediabunny library. - [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection by processing external data from project manifests and remote documentation.
- Ingestion points: Project manifests, lockfiles, and
remotion.devcompatibility documentation. - Boundary markers: None identified.
- Capability inventory: Package management and shell command execution (
npm,npx). - Sanitization: None identified.
Audit Metadata