remotion-best-practices
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run
npx remotion studioto open an interactive video preview andnpx remotion renderto export video files. These are standard commands for the Remotion framework. - [EXTERNAL_DOWNLOADS]: The use of
npximplicitly fetches theremotionpackage and its dependencies from the official npm registry if they are not already cached locally. - [INDIRECT_PROMPT_INJECTION]: The skill routes user-provided requests (e.g., product descriptions for promo videos) to specialized workflows, which creates a surface for potential indirect prompt injection if downstream tools process untrusted data.
- Ingestion points: User prompts processed via the router instructions in
SKILL.md. - Boundary markers: None explicitly defined in this top-level routing file.
- Capability inventory: Execution of shell commands via
npxfor studio and rendering tasks. - Sanitization: No explicit input validation or sanitization is performed at this routing layer.
Audit Metadata