remotion-captions
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install official packages from the
@remotionscope and fetches data from established domains associated with the Remotion framework (remotion.dev). These are recognized as legitimate resources for this specific development ecosystem. - [REMOTE_CODE_EXECUTION]: In
transcribe-captions.md, a script is provided that usesinstallWhisperCppto download and set up a C++ binary for audio transcription. This represents a functional requirement of the tool and originates from a well-known service provider. - [INDIRECT_PROMPT_INJECTION]: The skill implements functionality to parse external data from
.srtand.jsonfiles. While this ingests content that could potentially contain malicious instructions, the capability is central to the skill's purpose and lacks automated execution paths into sensitive system areas.
Audit Metadata