remotion-best-practices
Pass
Audited by Gen Agent Trust Hub on Apr 30, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing various packages from the official Remotion ecosystem (e.g.,
@remotion/three,@remotion/media,@remotion/captions) to extend functionality. These are standard dependencies for the framework. - [COMMAND_EXECUTION]: Instructions in
rules/ffmpeg.mdandrules/transcribe-captions.mddescribe using FFmpeg and FFprobe for video processing and audio extraction. This is a functional requirement for video creation tools. - [REMOTE_CODE_EXECUTION]: The transcription rule (
rules/transcribe-captions.md) facilitates the installation and execution of thewhisper.cppbinary via the@remotion/install-whisper-cpppackage. This is a documented method for speech-to-text conversion within the Remotion environment. - [DATA_EXFILTRATION]: Documentation for the voiceover feature (
rules/voiceover.md) involves sending text content to the ElevenLabs API for speech synthesis. This is a legitimate functional requirement for utilizing a third-party TTS service. - [CREDENTIALS_UNSAFE]: The skill provides best-practice guidance for managing sensitive API keys (e.g., ElevenLabs, Mapbox) using environment variables and
.envfiles rather than hardcoding them into scripts. - [PROMPT_INJECTION]: The
rules/tailwind.mdfile contains an instruction for the agent to use theWebFetchtool to retrieve documentation fromremotion.dev. This is a benign use of tool calling to obtain the latest technical instructions.
Audit Metadata