rendiv-video
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and rules for the rendiv framework, a React-based programmatic video generation tool. The instructions are consistent with established development practices for this domain.
- [INDIRECT_PROMPT_INJECTION]: The framework allows for the ingestion of external data such as SRT subtitles (rules/captions.md), Whisper transcripts (rules/captions.md), and input properties (rules/render-lifecycle.md) to parameterize video rendering. While this creates a processing surface for untrusted data, it is a standard and necessary feature for automated video production.
- [DYNAMIC_EXECUTION]: The rendering process involves bundling code with Vite and using a headless Chromium browser via Playwright to capture frames (rules/render-lifecycle.md). The CLI also creates a temporary '.studio/' directory for development tasks (rules/cli-and-studio.md). These actions are transparently documented as part of the framework's core architecture.
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install various Node.js packages under the '@rendiv' scope, as well as third-party libraries like 'three' and 'lottie-web'. The update process is handled via a dedicated upgrade command in the CLI (rules/cli-and-studio.md). These are standard dependency management operations.
Audit Metadata