remotion-upgrade
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
npx remotion upgradeandnpx skills updateto perform project maintenance. These commands execute the official Remotion CLI and a skill management utility to update the development environment. - [INDIRECT_PROMPT_INJECTION]: The agent is instructed to read project manifests (e.g.,
package.json) and lockfiles to determine existing package versions. While this involves processing user-controlled files, the scope is limited to dependency version identification. - [EXTERNAL_DOWNLOADS]: The skill uses
npm viewto fetch metadata and version information from the official NPM registry forremotion,@remotion/studio, and other auxiliary packages likezodand@huggingface/transformersto ensure version alignment.
Audit Metadata