remotion-best-practices
Pass
Audited by Gen Agent Trust Hub on May 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as an educational resource for the Remotion framework. All code snippets and technical guidance align with established best practices for video generation using React.
- [COMMAND_EXECUTION]: The skill documents standard CLI commands for rendering video using the Remotion CLI (
npx remotion render). These commands are used for their intended purpose—generating video files from source code—and include standard parameters for codecs, resolution, and concurrency. - [EXTERNAL_DOWNLOADS]: Examples in the documentation illustrate how to load remote assets (e.g., images) using the
<Img />component. This is a core feature of the framework for dynamic content generation and is used here in a benign, illustrative context. - [INDIRECT_PROMPT_INJECTION]: The skill illustrates the use of
calculateMetadata, which includes an ingestion point for external data via a placeholderfetchData()function. - Ingestion points:
fetchData()inSKILL.md. - Boundary markers: Not present in the abstract example code.
- Capability inventory: Command execution via
remotion renderCLI. - Sanitization: Not applicable in this code snippet context.
- Assessment: This is a standard architectural pattern for the framework and does not represent an active vulnerability in the skill itself.
Audit Metadata