remotion-studio

Pass

Audited by Gen Agent Trust Hub on Nov 9, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The instructions utilize 'npx remotion studio', which is the standard, documented command for the Remotion library's preview environment. This aligns with the expected behavior for a skill provided by the official vendor.
  • [COMMAND_EXECUTION]: The skill involves running shell commands to start a local preview server. This execution is limited to the specific, legitimate purpose of video development and does not involve unauthorized or suspicious system commands.
  • [INDIRECT_PROMPT_INJECTION]: The agent is instructed to read the command output (ingestion: stdout) to retrieve and open a preview URL. Although there are no specific boundary markers or sanitization steps mentioned for this data, the tool is a known development utility from the skill's author, and the risk of malicious instructions being injected via the local server's output is minimal.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 9, 2026, 08:25 PM