remotion-docs

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill embeds a literal Algolia API key (in the POST URL) so any generated request or reproduced example would include that secret verbatim, which is high-risk secret handling.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s required runtime workflow explicitly uses the Algolia Search API, then selects hit urls (from outsider-influenced search inputs) and fetches the corresponding Remotion docs .md pages as Markdown content, meaning free-text search queries can lead to ingestion of arbitrary page text at runtime.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill performs runtime fetches from the Algolia search endpoint (POST https://plsduol1ca-dsn.algolia.net/1/indexes/*/queries?x-algolia-api-key=3e42dbd4f895fe93ff5cf40d860c4a85&x-algolia-application-id=PLSDUOL1CA) and then retrieves Remotion Markdown pages (e.g., https://www.remotion.dev/docs/use-video-config.md) which are injected into the agent context to drive its responses, so these external URLs directly influence prompts at runtime.

HIGH W008: Secret detected in skill content (API keys, tokens, passwords).

• Secret detected (high risk: 1.00). The POST URL in SKILL.md line 9 contains an explicit, high-entropy API key parameter: x-algolia-api-key=3e42dbd4f895fe93ff5cf40d860c4a85. This is a literal-looking, random value that can grant access to the Algolia index and therefore meets the definition of a secret. No other high-entropy credentials were found; the application ID (PLSDUOL1CA) is public/identifying and not secret, and there are no placeholders or redacted markers to ignore.