remotion-to-hyperframes
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npm installwithin its test corpus scripts to set up the Remotion environment for baseline rendering. - [EXTERNAL_DOWNLOADS]: The generated HyperFrames compositions include script tags referencing well-known animation libraries (GSAP and Lottie) from public CDNs such as Cloudflare (cdnjs) and Unpkg.
- [COMMAND_EXECUTION]: The skill executes
ffmpegandffprobecommands for video analysis, SSIM differencing, and generating side-by-side comparison strips. - [COMMAND_EXECUTION]: The skill uses the Remotion CLI via
npx remotionto render reference video files from the provided source compositions. - [INDIRECT_PROMPT_INJECTION]: The skill processes external Remotion source code (TypeScript/React) provided by the user. To mitigate risks associated with non-deterministic React code, it includes a Python-based linter that identifies and blocks patterns such as
useState,useEffectwith dependencies, and third-party React UI libraries.
Audit Metadata