remotion-markup

Pass

Audited by Gen Agent Trust Hub on Oct 16, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill allows for the integration of remote assets including video, audio, Lottie JSON files, and fonts from established providers like Google Fonts and various CDNs (unpkg.com, lottiefiles.com). This behavior is consistent with the primary purpose of a video creation tool.- [DYNAMIC_EXECUTION]: The skill includes geospatial data preparation scripts (prep-cesium-path.mjs, prep-geo.mjs) and custom effect registration (createEffect). These tools allow for local data processing and frame-by-frame rendering logic necessary for the framework's operation.- [COMMAND_EXECUTION]: Users are guided to perform standard CLI operations such as installing Node.js packages and using FFmpeg via npx remotion ffmpeg for non-destructive video editing and analysis.- [SAFE]: Analysis found no evidence of prompt injection, obfuscation, or unauthorized data exfiltration. The skill facilitates legitimate developer workflows and handles sensitive API keys (e.g., ElevenLabs, MapTiler) by advising the use of environment variables.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 16, 2026, 11:34 AM