remotion
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches official Remotion packages and project templates from the npm registry using commands like
npm create video@latestandnpm install. - [REMOTE_CODE_EXECUTION]: Downloads and executes external skills from the official Remotion development repository via
npx skills add remotion-dev/skillsto incorporate advanced animation patterns. - [COMMAND_EXECUTION]: Utilizes
Bashto executenpm,npx, andcurlfor project bootstrapping, dependency management, and retrieving image assets from external Stitch URLs. - [INDIRECT_PROMPT_INJECTION]: The skill implements a workflow to parse HTML code from external Stitch projects for the purpose of generating automatic video annotations, creating a surface for indirect prompt injection.
- Ingestion points: Retrieves HTML source from
htmlCode.downloadUrlprovided by the Stitch API. - Boundary markers: The instructions do not define delimiters or specific "ignore instructions" warnings for the agent when processing the ingested HTML data.
- Capability inventory: The skill has access to
Bash(capable of executing shell commands),Read, andWritetools across its project structure. - Sanitization: There is no mention of sanitizing or validating the content of the external HTML files before they are parsed for text extraction.
- [DYNAMIC_EXECUTION]: Generates React-based TypeScript components such as
ScreenSlide.tsxandWalkthroughComposition.tsxat runtime, which are then compiled and rendered into the final video output.
Audit Metadata