remotion-create
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute
npx create-video@latestandnpm iwithin the local environment. These commands are used to initialize the project structure and install required Node.js packages. - [EXTERNAL_DOWNLOADS]: Retrieves the Remotion scaffolding utility and project dependencies from the npm registry.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user input to define video content.
- Ingestion points: User-provided prompts (e.g., "make a promo for my product") are used to generate project content.
- Boundary markers: No explicit delimiters or warnings are used to isolate untrusted data.
- Capability inventory: Shell execution (
npx,npm) and file system access for project scaffolding. - Sanitization: No specific sanitization or filtering of external content is specified.
Audit Metadata