remotion-motion-graphics
Warn
Audited by Socket on Oct 12, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the core Remotion/snapcn usage is purpose-aligned, but the skill expands trust beyond its stated need by installing another skill and recommending an unpinned MCP CLI that receives an API key. Data flows are not overtly deceptive, yet the transitive skill install and credential-forwarding to mutable external code make the overall footprint higher risk than a simple motion-graphics guide.
Confidence: 87%Severity: 74%
Audit Metadata