remotion-best-practices
Warn
Audited by Gen Agent Trust Hub on Jun 6, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes PowerShell with
-ExecutionPolicy Bypassto run a script at a hardcoded absolute path:D:/PythonProjectcodex/plugins/ark-image/scripts/run_ark_text2img.ps1. This bypasses local security constraints and relies on specific local infrastructure. - [COMMAND_EXECUTION]: Multiple rule files (e.g.,
rules/ffmpeg.md,rules/silence-detection.md) instruct the agent to execute system commands includingffmpeg,ffprobe,npx, andpythonscripts for video processing. - [EXTERNAL_DOWNLOADS]: The transcription workflow in
rules/transcribe-captions.mdutilizes the@remotion/install-whisper-cpplibrary to download and install thewhisper.cppbinary and models at runtime. - [EXTERNAL_DOWNLOADS]: The skill performs network requests to external services, including
api.elevenlabs.iofor voice generation andmapbox.comfor map data, which are standard for its functionality but involve external data flow. - [COMMAND_EXECUTION]: The skill uses Playwright to automate browser sessions for the Douyin Creator Center (
creator.douyin.com), involving complex interactions like file uploads and metadata entry on a live social platform. While safety prompts are included, browser automation of account-bound platforms carries inherent risks.
Audit Metadata