remotion-docs

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill embeds a literal Algolia API key (in the POST URL) so any generated request or reproduced example would include that secret verbatim, which is high-risk secret handling.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). SKILL.md:35-40 describes fetching Remotion documentation pages from the public web (via Algolia search results and then retrieving the corresponding .md URLs), which would ingest outsider-authored free text into the agent’s LLM context at runtime.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill instructs the agent at runtime to query the Algolia endpoint (https://plsduol1ca-dsn.algolia.net/1/indexes/*/queries?x-algolia-api-key=3e42dbd4f895fe93ff5cf40d860c4a85&x-algolia-application-id=PLSDUOL1CA) and to fetch remote Markdown pages (e.g., https://www.remotion.dev/docs/use-video-config.md, https://www.remotion.dev/docs/sequence.md, https://www.remotion.dev/docs/lambda/rendermediaonlambda.md) which will directly control the agent's instructions/behavior.

HIGH W008: Secret detected in skill content (API keys, tokens, passwords).

• Secret detected (high risk: 1.00). The POST request in SKILL.md includes a literal, high-entropy API key in the URL query parameter x-algolia-api-key: "3e42dbd4f895fe93ff5cf40d860c4a85". This is not a placeholder (e.g., YOUR_API_KEY) and appears to be a real Algolia API key (32 hex characters), so it qualifies as a secret that provides access to a service.