Skills
Navigate
skills/shadcn-labs/snapcn/remotion-product-demo/Gen Agent Trust Hub

remotion-product-demo

Pass

Audited by Gen Agent Trust Hub on Oct 12, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads components using the shadcn CLI from the @snapcn namespace. These represent vendor-owned resources for shadcn-labs and are standard for the skill's purpose.
  • [COMMAND_EXECUTION]: The skill uses npx and npm for installing dependencies and rendering video files. These are expected developer workflows and do not exhibit malicious patterns.
  • [DATA_EXPOSURE]: The skill includes instructions for setting up an MCP server using an API key placeholder (SNAPCN_API_KEY=YOUR_KEY). It correctly guides the user to provide their own key rather than hardcoding credentials.
  • [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to extract labels and strings from user-provided screen recordings or screenshots to use in video code. This is an intended function of the skill with no identified exploitation path during static analysis.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 12, 2026, 02:51 PM