remotion-docs
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFECREDENTIALS_UNSAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [CREDENTIALS_UNSAFE]: The file
SKILL.mdcontains a hardcoded Algolia API key (3e42dbd4f895fe93ff5cf40d860c4a85) and Application ID (PLSDUOL1CA) used to query the official documentation index. These are public, vendor-provided search-only credentials for theremotionindex. - [INDIRECT_PROMPT_INJECTION]: The skill processes content fetched from external documentation URLs, which constitutes an indirect prompt injection surface.
- Ingestion points: Documentation pages are fetched from
www.remotion.devbased on search results or direct links inSKILL.md. - Boundary markers: No specific delimiters or instructions are provided to the agent to distinguish between documentation content and system instructions.
- Capability inventory: The skill utilizes network access to fetch documentation markdown and provides the resulting text to the agent context.
- Sanitization: There is no evidence of content sanitization or validation performed on the fetched markdown data to prevent instruction injection.
Audit Metadata