remotion-best-practices
Pass
Audited by Gen Agent Trust Hub on May 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of best practices and implementation rules for the Remotion video framework. All recommended tools and libraries are official vendor packages or established industry standards.\n- [COMMAND_EXECUTION]: Provides instructions for using official CLI tools like
npx remotionand project scaffolding withnpx create-video. It also details usage offfmpegandffprobefor legitimate media processing tasks such as trimming and silence detection.\n- [EXTERNAL_DOWNLOADS]: Describes fetching remote assets (video, audio, Lottie animations) from well-known or vendor-controlled domains likeremotion.mediaandlottiefiles.com. These are documented as standard data sources for video compositions.\n- [REMOTE_CODE_EXECUTION]: Instructions for using@remotion/install-whisper-cppinvolve downloading and installing Whisper.cpp binaries. This is a vendor-provided utility for transcription and follows expected developer workflows for this ecosystem.\n- [DATA_EXFILTRATION]: The voiceover rule includes code to send text data to the ElevenLabs API. This is a functional requirement for speech generation and targets a well-known service using standard API practices.\n- [PROMPT_INJECTION]: The skill does not contain instructions that attempt to override agent safety guidelines, extract system prompts, or bypass restrictions.
Audit Metadata