remotion-upgrade
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands such as
npx remotion upgradeandnpx skills update. These commands are used to invoke the framework's official CLI tools for maintenance and updates. - [EXTERNAL_DOWNLOADS]: The skill fetches package metadata and dependency information from the official npm registry using
npm viewcommands. It also references the official Remotion release page on GitHub for changelog information. - [INDIRECT_PROMPT_INJECTION]: The skill processes local project files, including manifests (
package.json) and lockfiles, as well as JSON output from the npm registry to identify and align package versions. While this involves processing external and local data, the operations are restricted to dependency management for the Remotion ecosystem. - Ingestion points: Project manifests, lockfiles, and
npm viewJSON output. - Boundary markers: None explicitly defined in the instructions.
- Capability inventory: Command execution (
npx,npm), file system inspection, and package installation/alignment. - Sanitization: The skill identifies specific package prefixes (e.g.,
@remotion/*) to limit the scope of automated changes.
Audit Metadata