video-production
Pass
Audited by Gen Agent Trust Hub on Mar 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Bash tool to execute
npx remotion previewandnpx remotion rendercommands. This is necessary for the core functionality of previewing and generating the final video files. - [EXTERNAL_DOWNLOADS]: Uses
npxto fetch and execute theremotionpackage from the npm registry. Remotion is a well-known library for video production with React. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection (Category 8) because it translates unstructured user text instructions into structured video specifications and React code.
- Ingestion points: User-provided text instructions and prompts for video generation (referenced in SKILL.md).
- Boundary markers: None identified in the provided instructions to separate user input from the system prompt.
- Capability inventory: Uses
Bashfor command execution and implies the use of theWritetool to generate.tsxfiles for the Remotion composition. - Sanitization: No explicit sanitization or validation steps are defined for the input text before it is used to generate scene plans or code snippets.
Audit Metadata