remotion-captions
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill directs the agent to fetch the source code for the
BasicCaptionsUI component from the official Remotion documentation website. It also utilizes built-in functions to download Whisper AI models from external repositories for the purpose of audio transcription. - [COMMAND_EXECUTION]: Instructions are provided to install necessary Node.js dependencies using standard package managers such as npm, yarn, pnpm, and bun.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data by parsing
.srtfiles and transcribing user-provided video or audio files. - Ingestion points: Data enters the context through the
parseSrtfunction inimport-srt-captions.mdand thetranscribefunction intranscribe-captions.md. - Capability inventory: The skill demonstrates the ability to write files to the local system (
writeFile), perform network requests (fetch), and execute package installation commands. - Sanitization: There is no explicit sanitization shown for the contents of the subtitle files before they are processed.
- Boundary markers: No delimiters or specific instructions to ignore embedded commands within the subtitle data are provided in the examples.
Audit Metadata