remotion-best-practices
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructional content and code examples for the Remotion framework. All external resources, including package installations and documentation links, point to official and well-known services such as NPM, Google Fonts, and Mapbox.\n- [INDIRECT_PROMPT_INJECTION]: The skill contains examples of data ingestion from external URLs in
calculate-metadata.md,compositions.md, andrules/lottie.md. While these represent an attack surface, they are standard and necessary patterns for dynamic media generation within the framework.\n - Ingestion points: External data fetched via
fetch()from user-provided URLs or Lottie assets.\n - Boundary markers: Not explicitly defined in code snippets.\n
- Capability inventory: Rendering process capabilities (media file generation) and network operations.\n
- Sanitization: Not demonstrated in the basic examples provided.\n- [COMMAND_EXECUTION]: The skill includes instructions for using standard CLI tools (
npx,pnpm,yarn,bun) to manage project dependencies and perform renders. These are legitimate development workflows.
Audit Metadata