remotion-best-practices

Pass

Audited by Gen Agent Trust Hub on Apr 30, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill recommends installing various packages from the official Remotion ecosystem (e.g., @remotion/three, @remotion/media, @remotion/captions) to extend functionality. These are standard dependencies for the framework.
  • [COMMAND_EXECUTION]: Instructions in rules/ffmpeg.md and rules/transcribe-captions.md describe using FFmpeg and FFprobe for video processing and audio extraction. This is a functional requirement for video creation tools.
  • [REMOTE_CODE_EXECUTION]: The transcription rule (rules/transcribe-captions.md) facilitates the installation and execution of the whisper.cpp binary via the @remotion/install-whisper-cpp package. This is a documented method for speech-to-text conversion within the Remotion environment.
  • [DATA_EXFILTRATION]: Documentation for the voiceover feature (rules/voiceover.md) involves sending text content to the ElevenLabs API for speech synthesis. This is a legitimate functional requirement for utilizing a third-party TTS service.
  • [CREDENTIALS_UNSAFE]: The skill provides best-practice guidance for managing sensitive API keys (e.g., ElevenLabs, Mapbox) using environment variables and .env files rather than hardcoding them into scripts.
  • [PROMPT_INJECTION]: The rules/tailwind.md file contains an instruction for the agent to use the WebFetch tool to retrieve documentation from remotion.dev. This is a benign use of tool calling to obtain the latest technical instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 30, 2026, 03:09 PM