remotion-upgrade

Pass

Audited by Gen Agent Trust Hub on Oct 28, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses npx remotion upgrade and npx skills update to perform project maintenance. These commands execute the official Remotion CLI and a skill management utility to update the development environment.
  • [INDIRECT_PROMPT_INJECTION]: The agent is instructed to read project manifests (e.g., package.json) and lockfiles to determine existing package versions. While this involves processing user-controlled files, the scope is limited to dependency version identification.
  • [EXTERNAL_DOWNLOADS]: The skill uses npm view to fetch metadata and version information from the official NPM registry for remotion, @remotion/studio, and other auxiliary packages like zod and @huggingface/transformers to ensure version alignment.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 28, 2026, 10:20 PM