remotion-best-practices

Pass

Audited by Gen Agent Trust Hub on May 5, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a comprehensive documentation and rule set for Remotion video development, with all external resources tracing back to the vendor or well-known services.
  • [EXTERNAL_DOWNLOADS]: The skill recommends installing official Remotion packages (e.g., @remotion/media, @remotion/captions, @remotion/media-utils) and reputable third-party libraries (e.g., mapbox-gl, zod, turf). These are standard dependencies for the described functionality.
  • [COMMAND_EXECUTION]: Instructions include standard CLI usage for bootstrapping projects using create-video, running the local development studio, and invoking video processing tools such as ffmpeg and ffprobe through the remotion CLI.
  • [DATA_EXFILTRATION]: The skill provides examples for fetching data from external APIs (e.g., ElevenLabs for text-to-speech, Mapbox for map animations, and LottieFiles for animations). These operations are legitimate, intended for the primary purpose of the skill, and follow standard web development patterns.
  • [DYNAMIC_EXECUTION]: Instructions in rules/transcribe-captions.md describe using a vendor-provided utility (installWhisperCpp) to download and run the Whisper.cpp binary locally for audio transcription. This is a documented and specialized workflow for this framework.
  • [SAFE]: The skill recommends the use of environment variables (e.g., REMOTION_MAPBOX_TOKEN, ELEVENLABS_API_KEY) for secret management, which is a standard security best practice.
Audit Metadata
Risk Level
SAFE
Analyzed
May 5, 2026, 04:30 AM