remotion-markup
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
CesiumFlythroughcomponent fetches the CesiumJS library and its associated CSS from thecesium.comCDN at runtime. - [DYNAMIC_EXECUTION]: The
CesiumFlythroughcomponent usesdocument.createElement('script')to inject and execute the CesiumJS library into the environment when the component initializes. - [INDIRECT_PROMPT_INJECTION]: The skill documents a pattern in
calculate-metadata.mdthat ingests external data from a URL (props.dataUrl) and merges it into the component's props. This pattern represents a potential attack surface for indirect prompt injection. - Ingestion points:
calculate-metadata.md(via thedataUrlprop incalculateMetadata). - Boundary markers: Absent; instructions do not specify using delimiters or warnings for fetched content.
- Capability inventory: The skill utilizes network calls (fetch, ElevenLabs API, map providers), file writing (via provided build scripts), and dynamic DOM manipulation.
- Sanitization: Absent; the example shows the fetched JSON being directly spread into the props object.
Audit Metadata