remotion-best-practices
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides numerous shell commands for managing dependencies (e.g.,
npx remotion add,npm install) and processing media files usingffmpegandffprobeviabunx. These are standard development operations for the Remotion ecosystem. - [EXTERNAL_DOWNLOADS]: The documentation encourages downloading various library dependencies from the npm registry and external assets such as Google Fonts. It also includes instructions for downloading specific AI models using the
@remotion/install-whisper-cpputility for transcription tasks. - [SAFE]: The skill provides patterns for fetching external content (JSON data, Lottie animations, and caption files) from remote URLs. While this creates a processing surface for untrusted data, it is a standard requirement for the described media generation workflows and occurs via standard
fetchcalls. - [SAFE]: The skill correctly advises users to manage sensitive credentials, such as API keys for Mapbox and ElevenLabs, using environment variables and
.envfiles rather than hardcoding them into the source code.
Audit Metadata