remotion-logo-animation
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions direct the agent to fetch a component catalog from
https://snapcn.dev/llms-components.txtand specific component documentation fromhttps://snapcn.dev/docs/logos/. These resources provide the structural information needed for logo animation scenes. - [REMOTE_CODE_EXECUTION]: The skill uses
npx shadcn@latest addto install external components from the@snapcnNPM scope. It also suggests installing a Model Context Protocol (MCP) server usingnpx -y @snapcn/mcp@latest, which involves executing remote code. - [COMMAND_EXECUTION]: Local shell commands are used for rendering and verifying animations through
npx remotion stillandnpx remotion render. - [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it ingests external component lists and documentation to guide the agent's implementation of animation scenes.
- Ingestion points: External URLs
https://snapcn.dev/llms-components.txtandhttps://snapcn.dev/docs/logos/*.mdare accessed to retrieve component data. - Boundary markers: Absent; the skill does not define specific delimiters or instructions to ignore potential injections within the fetched documentation.
- Capability inventory: The agent has the ability to install remote packages (
npx shadcn) and execute rendering commands (npx remotion). - Sanitization: Absent; the skill does not explicitly describe validation or sanitization of the content fetched from the remote component catalog.
Audit Metadata