remotion-create
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes
npx create-video@latestandnpm ito fetch project scaffolding tools and dependencies. These downloads target the official Remotion development toolset and well-known package registries. - [COMMAND_EXECUTION]: The skill executes shell commands to automate the project setup process, including directory navigation, package installation, and starting the
remotion studiopreview server. These commands are restricted to the local development environment. - [INDIRECT_PROMPT_INJECTION]: The skill accepts user-provided project names and React markup to build the video composition. While this represents an ingestion surface for user-controlled data, it is the intended primary function of the skill for code generation and follows standard development workflows.
Audit Metadata