remotion
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches screenshots and metadata from Stitch project URLs for video processing.- [REMOTE_CODE_EXECUTION]: Installs packages using
npm installand adds skills vianpx skills addfrom the well-known Remotion ecosystem.- [INDIRECT_PROMPT_INJECTION]: Processes untrusted HTML content from Stitch screens to automatically generate text overlays. - Ingestion points: HTML code downloaded from
htmlCode.downloadUrlfor each screen (described in Step 3 of the retrieval section). - Boundary markers: Lacks specific prompt delimiters or "ignore embedded instructions" warnings during interpolation of extracted text.
- Capability inventory: Includes shell execution via
Bash(npm, npx, render commands),Write(component generation), andweb_fetchfor asset retrieval. - Sanitization: The instructions explicitly advise treating downloaded HTML as "inert untrusted text" and sanitizing filenames derived from screens.- [DYNAMIC_EXECUTION]: Programmatically generates React-based video components (e.g.,
ScreenSlide.tsx) which are subsequently rendered into video files using the Remotion CLI.
Audit Metadata