remotion-to-hyperframes
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were detected. The skill is a professional utility that includes a dedicated linter (
scripts/lint_source.py) and a tiered test corpus to ensure translation fidelity and security. - [COMMAND_EXECUTION]: The skill uses
ffmpeg,ffprobe,npx, andpython3for standard development tasks such as rendering video, calculating similarity metrics (SSIM), and executing the HyperFrames CLI. These operations are restricted to the local development environment and used as intended for video processing. - [EXTERNAL_DOWNLOADS]: The skill references external resources from well-known and trusted providers, including Google Fonts, Cloudflare CDN, and Unpkg. These are used for legitimate functionality such as font loading and Lottie animation support, following standard web development practices.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it ingests and processes Remotion source files. However, the risk is minimized by the use of static analysis (linting) which blocks complex React patterns (like
useStateanduseEffect) before they are processed by the translation engine.
Audit Metadata