studio-dev
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for running build and test tasks using
bunx turbofor the@remotion/studiopackage. These are standard verification steps for developers. - [INDIRECT_PROMPT_INJECTION]: Defines a surface for AI agent interaction through WebMCP tools. Evidence chain: 1) Ingestion points: WebMCP tool inputs and source code edits. 2) Boundary markers: Defined by existing tool registrations in WebMcp.tsx. 3) Capability inventory: Subprocess execution via turbo, source mutations, and rendering. 4) Sanitization: Instructions require maintaining parity in validation, error handling, and mode-based restrictions between UI and agent entry points.
- [EXTERNAL_DOWNLOADS]: References official GitHub repositories and issue trackers. These links point to the vendor's own infrastructure and are used for development context.
- [SAFE]: No malicious behavior, obfuscation, or unauthorized data access patterns were detected. The skill focuses on secure and performant development practices.
Audit Metadata