remotion-best-practices
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of documentation and React code snippets that adhere to standard Remotion development practices. No malicious behaviors, obfuscation, or unauthorized data access patterns were identified.
- [EXTERNAL_DOWNLOADS]: The skill references several official @remotion scoped packages and the mediabunny library. These are routine dependencies used for media processing, font loading, and animations in video projects.
- [INDIRECT_PROMPT_INJECTION]: The skill demonstrates patterns for ingesting external data (Lottie files, SRT subtitles, and API responses). While this creates an ingestion surface, the patterns are standard for dynamic video generation. 1. Ingestion points: fetch calls in rules/lottie.md (Lottie JSON), rules/import-srt-captions.md (SRT text), and rules/calculate-metadata.md (API data). 2. Boundary markers: Absent in illustrative code snippets. 3. Capability inventory: Ingested data influences video properties and composition metadata. 4. Sanitization: Performed via standard JSON parsing and React rendering.
Audit Metadata