remotion-studio
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The instructions utilize 'npx remotion studio', which is the standard, documented command for the Remotion library's preview environment. This aligns with the expected behavior for a skill provided by the official vendor.
- [COMMAND_EXECUTION]: The skill involves running shell commands to start a local preview server. This execution is limited to the specific, legitimate purpose of video development and does not involve unauthorized or suspicious system commands.
- [INDIRECT_PROMPT_INJECTION]: The agent is instructed to read the command output (ingestion: stdout) to retrieve and open a preview URL. Although there are no specific boundary markers or sanitization steps mentioned for this data, the tool is a known development utility from the skill's author, and the risk of malicious instructions being injected via the local server's output is minimal.
Audit Metadata