video-production

Pass

Audited by Gen Agent Trust Hub on Mar 20, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the Bash tool to execute npx remotion preview and npx remotion render commands. This is necessary for the core functionality of previewing and generating the final video files.
  • [EXTERNAL_DOWNLOADS]: Uses npx to fetch and execute the remotion package from the npm registry. Remotion is a well-known library for video production with React.
  • [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection (Category 8) because it translates unstructured user text instructions into structured video specifications and React code.
  • Ingestion points: User-provided text instructions and prompts for video generation (referenced in SKILL.md).
  • Boundary markers: None identified in the provided instructions to separate user input from the system prompt.
  • Capability inventory: Uses Bash for command execution and implies the use of the Write tool to generate .tsx files for the Remotion composition.
  • Sanitization: No explicit sanitization or validation steps are defined for the input text before it is used to generate scene plans or code snippets.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 20, 2026, 03:26 AM