remotion-captions

Pass

Audited by Gen Agent Trust Hub on Oct 22, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill directs the agent to fetch the source code for the BasicCaptions UI component from the official Remotion documentation website. It also utilizes built-in functions to download Whisper AI models from external repositories for the purpose of audio transcription.
  • [COMMAND_EXECUTION]: Instructions are provided to install necessary Node.js dependencies using standard package managers such as npm, yarn, pnpm, and bun.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data by parsing .srt files and transcribing user-provided video or audio files.
  • Ingestion points: Data enters the context through the parseSrt function in import-srt-captions.md and the transcribe function in transcribe-captions.md.
  • Capability inventory: The skill demonstrates the ability to write files to the local system (writeFile), perform network requests (fetch), and execute package installation commands.
  • Sanitization: There is no explicit sanitization shown for the contents of the subtitle files before they are processed.
  • Boundary markers: No delimiters or specific instructions to ignore embedded commands within the subtitle data are provided in the examples.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 22, 2026, 08:21 PM