remotion-create

Pass

Audited by Gen Agent Trust Hub on Sep 7, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill utilizes npx create-video@latest and npm i to fetch project scaffolding tools and dependencies. These downloads target the official Remotion development toolset and well-known package registries.
  • [COMMAND_EXECUTION]: The skill executes shell commands to automate the project setup process, including directory navigation, package installation, and starting the remotion studio preview server. These commands are restricted to the local development environment.
  • [INDIRECT_PROMPT_INJECTION]: The skill accepts user-provided project names and React markup to build the video composition. While this represents an ingestion surface for user-controlled data, it is the intended primary function of the skill for code generation and follows standard development workflows.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 7, 2026, 01:46 PM
Security Audit — agent-trust-hub — remotion-create