remotion-create

Pass

Audited by Gen Agent Trust Hub on Aug 2, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses npx create-video, npm install, and npx remotion to scaffold and manage the project. These are standard commands for the Remotion development workflow.
  • [EXTERNAL_DOWNLOADS]: Downloads project templates and dependencies from the Remotion package registry.
  • [REMOTE_CODE_EXECUTION]: Executes Remotion CLI tools via npx. These tools originate from the official developer ecosystem.
  • [PROMPT_INJECTION]: The skill mentions that user edits in the Remotion Studio can write back to code. This creates a potential surface for indirect prompt injection where external data influences the project content. Ingestion points: User edits in the Remotion Studio (SKILL.md). Boundary markers: Absent. Capability inventory: Shell commands (npx, npm) and local file writing (SKILL.md). Sanitization: Absent.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 2, 2026, 07:04 PM
Security Audit — agent-trust-hub — remotion-create