remotion-video-workflow
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a suite of shell scripts (render_video.sh, render_cover.sh, run_checks.sh, probe_output.sh) to automate project validation and rendering using npm, npx, and ffprobe. These are standard tools for the Remotion development environment and are used as intended for rendering and validating video files.- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted source material such as briefs and articles to generate video storyboards and content modules. * Ingestion points: Source material and content briefs entering the agent context via the Planning and Implementation modes in SKILL.md. * Boundary markers: The workflow enforces a data-layer separation by requiring a typed storyboard.ts module, which isolates narrative content from the React component logic. * Capability inventory: The skill can execute local scripts for rendering and testing, and it manages project-level file writes. * Sanitization: No explicit text sanitization or filtering of the source material is mentioned in the instructions.
Audit Metadata