remotion-docs
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTIONCREDENTIALS_UNSAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches documentation from
www.remotion.devand performs searches via the Algolia API (algolia.net). These are well-known and vendor-related services. - [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection as it retrieves and processes external Markdown content that could contain malicious instructions.
- Ingestion points: Documentation content fetched from
www.remotion.devbased on search results. - Boundary markers: None identified. The instructions do not provide delimiters or instructions to the agent to disregard embedded commands in the fetched text.
- Capability inventory: No dangerous capabilities such as file system writes, shell execution, or sensitive data access are identified within this skill.
- Sanitization: No sanitization or filtering of the external content is performed before processing.
- [CREDENTIALS_UNSAFE]: The skill contains a hardcoded Algolia API key (
3e42dbd4f895fe93ff5cf40d860c4a85) and Application ID (PLSDUOL1CA). These are used for searching the public documentation index of the vendor.
Audit Metadata