remotion-developer
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted content from script.md and storyboard.md files to drive its code generation logic.
- Ingestion points: The core pattern involves reading script.md and storyboard.md (SKILL.md).
- Boundary markers: There are no defined delimiters or instructions to ignore embedded commands in the ingested data.
- Capability inventory: The skill writes TypeScript/React files to the filesystem and executes them via Remotion Studio and the TypeScript compiler (SKILL.md).
- Sanitization: No sanitization or validation of the input file content is implemented before it is used to generate executable code.- [COMMAND_EXECUTION]: The skill programmatically executes shell commands to compile and serve the generated video project.
- Evidence: The skill mandates running
npx tsc --noEmitandnpx remotion studioin its closed-loop execution process.- [DYNAMIC_EXECUTION]: The skill generates source code files at runtime and subsequently triggers their compilation and execution. - Evidence: The "Generate" phase creates a project structure including Root.tsx and Video.tsx which are then loaded by the Remotion CLI for rendering and previewing.
Audit Metadata