remotion-best-practices
Pass
Audited by Gen Agent Trust Hub on May 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a comprehensive documentation and rule set for Remotion video development, with all external resources tracing back to the vendor or well-known services.
- [EXTERNAL_DOWNLOADS]: The skill recommends installing official Remotion packages (e.g.,
@remotion/media,@remotion/captions,@remotion/media-utils) and reputable third-party libraries (e.g.,mapbox-gl,zod,turf). These are standard dependencies for the described functionality. - [COMMAND_EXECUTION]: Instructions include standard CLI usage for bootstrapping projects using
create-video, running the local development studio, and invoking video processing tools such asffmpegandffprobethrough theremotionCLI. - [DATA_EXFILTRATION]: The skill provides examples for fetching data from external APIs (e.g., ElevenLabs for text-to-speech, Mapbox for map animations, and LottieFiles for animations). These operations are legitimate, intended for the primary purpose of the skill, and follow standard web development patterns.
- [DYNAMIC_EXECUTION]: Instructions in
rules/transcribe-captions.mddescribe using a vendor-provided utility (installWhisperCpp) to download and run the Whisper.cpp binary locally for audio transcription. This is a documented and specialized workflow for this framework. - [SAFE]: The skill recommends the use of environment variables (e.g.,
REMOTION_MAPBOX_TOKEN,ELEVENLABS_API_KEY) for secret management, which is a standard security best practice.
Audit Metadata