remotion-docs
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill fetches documentation from external URLs (remotion.dev) and instructs the agent to process and implement the retrieved content. This introduces a surface for indirect prompt injection, where malicious instructions could potentially be embedded in the documentation to influence the agent's actions.
- Ingestion points: Markdown documentation files retrieved from https://www.remotion.dev/docs/*.md.
- Boundary markers: Absent. The instructions do not define specific delimiters to separate external documentation from the agent's core instructions.
- Capability inventory: The agent is authorized to make network requests to fetch documentation and is directed to "Implement using the current documentation," giving the external content significant weight in the agent's output generation.
- Sanitization: None. There are no steps provided for the agent to validate or sanitize the markdown content before processing it.
Audit Metadata