remotion

Pass

Audited by Gen Agent Trust Hub on Sep 10, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches official Remotion packages and project templates from the npm registry using commands like npm create video@latest and npm install.
  • [REMOTE_CODE_EXECUTION]: Downloads and executes external skills from the official Remotion development repository via npx skills add remotion-dev/skills to incorporate advanced animation patterns.
  • [COMMAND_EXECUTION]: Utilizes Bash to execute npm, npx, and curl for project bootstrapping, dependency management, and retrieving image assets from external Stitch URLs.
  • [INDIRECT_PROMPT_INJECTION]: The skill implements a workflow to parse HTML code from external Stitch projects for the purpose of generating automatic video annotations, creating a surface for indirect prompt injection.
  • Ingestion points: Retrieves HTML source from htmlCode.downloadUrl provided by the Stitch API.
  • Boundary markers: The instructions do not define delimiters or specific "ignore instructions" warnings for the agent when processing the ingested HTML data.
  • Capability inventory: The skill has access to Bash (capable of executing shell commands), Read, and Write tools across its project structure.
  • Sanitization: There is no mention of sanitizing or validating the content of the external HTML files before they are parsed for text extraction.
  • [DYNAMIC_EXECUTION]: Generates React-based TypeScript components such as ScreenSlide.tsx and WalkthroughComposition.tsx at runtime, which are then compiled and rendered into the final video output.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 10, 2026, 05:54 AM
Security Audit — agent-trust-hub — remotion