cyxj-remotion-produce
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The script 'assets/qa-still.mjs' programmatically generates a temporary 'src/qa-entry.tsx' file and a 'src/qa-still.props.json' file at runtime, using project data to configure a standalone video rendering environment.
- [COMMAND_EXECUTION]: The skill uses 'spawnSync' to execute the 'remotion' CLI through 'npx', allowing it to render specific frames for quality assurance.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests local project data to determine its behavior, creating a potential surface for indirect influence. * Ingestion points: The skill reads from 'props.json', 'package.json', 'sceneMap.ts', and CLI arguments. * Boundary markers: No explicit boundaries or delimiters are used for data interpolation. * Capability inventory: The skill has the ability to write files to the project directory and execute shell commands. * Sanitization: The skill validates scene types against a local registry and ensures frame indices are integers.
Audit Metadata