remotion-upgrade
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads package updates from the npm registry and fetches version compatibility information from the official Remotion documentation website (remotion.dev).
- [COMMAND_EXECUTION]: Utilizes shell commands such as
npx remotion upgrade,npm view, andnpx skills updateto perform dependency management and skill synchronization within the local environment. - [INDIRECT_PROMPT_INJECTION]: The skill reads project manifests (e.g., package.json) and lockfiles to identify dependencies. While these files are external data sources, the skill's operations are constrained to standard package management tasks.
- Ingestion points: Project manifests and lockfiles (SKILL.md)
- Boundary markers: Absent
- Capability inventory: Package installation and updates via npm/npx
- Sanitization: None specified
Audit Metadata