remotion-upgrade

Pass

Audited by Gen Agent Trust Hub on Aug 13, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads package updates from the npm registry and fetches version compatibility information from the official Remotion documentation website (remotion.dev).
  • [COMMAND_EXECUTION]: Utilizes shell commands such as npx remotion upgrade, npm view, and npx skills update to perform dependency management and skill synchronization within the local environment.
  • [INDIRECT_PROMPT_INJECTION]: The skill reads project manifests (e.g., package.json) and lockfiles to identify dependencies. While these files are external data sources, the skill's operations are constrained to standard package management tasks.
  • Ingestion points: Project manifests and lockfiles (SKILL.md)
  • Boundary markers: Absent
  • Capability inventory: Package installation and updates via npm/npx
  • Sanitization: None specified
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 13, 2026, 03:19 AM