remotion-render
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
npx remotionto drive the video rendering process. This involves standard command-line operations for the Remotion framework, including rendering media, starting the development studio, and deploying cloud functions. - [EXTERNAL_DOWNLOADS]: The use of
npx remotionimplicitly involves fetching the Remotion package from the public npm registry if it is not already present in the environment. - [INDIRECT_PROMPT_INJECTION]: In Step 6, the skill ingests external JSON files containing 'props' to drive batch rendering. This is a legitimate data-driven feature of the tool, but it represents a surface where external data is incorporated into the execution flow. The skill also mentions resolving timing and asset issues by referencing external files like fonts and static assets.
Audit Metadata