remotion-saas
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references several official project templates and documentation hosted on the vendor's GitHub organization and primary domain.
- Evidence: References to
github.com/remotion-devandremotion.devfor framework templates, installation guides, and documentation. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process user descriptions of video applications to generate code and configurations, creating a surface for indirect instructions if the resulting application processes untrusted content.
- Ingestion points: User prompts describing the desired video application (e.g., in
SKILL.md). - Boundary markers: Absent; the skill provides code templates rather than sanitizing runtime input.
- Capability inventory: Uses CLI tools (
npx remotion), package managers (npx remotion add), and application deployment capabilities. - Sanitization: The skill explicitly instructs developers to implement their own authentication, rate limiting, and cost controls in the production application (in
rendering.md).
Audit Metadata