accept-element
Pass
Audited by Gen Agent Trust Hub on Aug 5, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local build and test scripts using
bun. These are standard project tools (e.g.,bun run render-element-previews,bun run build) intended for maintenance tasks within the Remotion ecosystem. - [DATA_EXFILTRATION]: The skill facilitates the upload of media assets to
remotion.media. This is a vendor-controlled domain used for hosting production assets, and the process is protected by a requirement for maintainer credentials. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from external pull requests (untrusted source). However, it implements a strong security boundary by explicitly instructing the agent to stop and wait for manual maintainer approval of the source code and assets before proceeding with uploads or commits, preventing automated exploitation.
- [SAFE]: The use of git commands (
git diff,git status) and file system operations (deleting temporary preview files) follows best practices for repository maintenance and cleanup.
Audit Metadata