remotion-best-practices

Pass

Audited by Gen Agent Trust Hub on Aug 13, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides numerous shell commands for managing dependencies (e.g., npx remotion add, npm install) and processing media files using ffmpeg and ffprobe via bunx. These are standard development operations for the Remotion ecosystem.
  • [EXTERNAL_DOWNLOADS]: The documentation encourages downloading various library dependencies from the npm registry and external assets such as Google Fonts. It also includes instructions for downloading specific AI models using the @remotion/install-whisper-cpp utility for transcription tasks.
  • [SAFE]: The skill provides patterns for fetching external content (JSON data, Lottie animations, and caption files) from remote URLs. While this creates a processing surface for untrusted data, it is a standard requirement for the described media generation workflows and occurs via standard fetch calls.
  • [SAFE]: The skill correctly advises users to manage sensitive credentials, such as API keys for Mapbox and ElevenLabs, using environment variables and .env files rather than hardcoding them into the source code.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 13, 2026, 10:07 PM