remotion-best-practices

Warn

Audited by Gen Agent Trust Hub on Jun 6, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill invokes PowerShell with -ExecutionPolicy Bypass to run a script at a hardcoded absolute path: D:/PythonProjectcodex/plugins/ark-image/scripts/run_ark_text2img.ps1. This bypasses local security constraints and relies on specific local infrastructure.
  • [COMMAND_EXECUTION]: Multiple rule files (e.g., rules/ffmpeg.md, rules/silence-detection.md) instruct the agent to execute system commands including ffmpeg, ffprobe, npx, and python scripts for video processing.
  • [EXTERNAL_DOWNLOADS]: The transcription workflow in rules/transcribe-captions.md utilizes the @remotion/install-whisper-cpp library to download and install the whisper.cpp binary and models at runtime.
  • [EXTERNAL_DOWNLOADS]: The skill performs network requests to external services, including api.elevenlabs.io for voice generation and mapbox.com for map data, which are standard for its functionality but involve external data flow.
  • [COMMAND_EXECUTION]: The skill uses Playwright to automate browser sessions for the Douyin Creator Center (creator.douyin.com), involving complex interactions like file uploads and metadata entry on a live social platform. While safety prompts are included, browser automation of account-bound platforms carries inherent risks.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 6, 2026, 02:31 PM