remotion-best-practices
Pass
Audited by Gen Agent Trust Hub on Mar 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill frequently recommends installing official Remotion packages (e.g., @remotion/three, @remotion/media, @remotion/captions) and common libraries (e.g., mapbox-gl, turf, zod) via standard package managers.
- [COMMAND_EXECUTION]: Rules for FFmpeg and audio transcription suggest executing CLI commands like
bunx remotion ffmpegand usingexecSyncfor format conversion. These are standard operations for video processing workflows. - [REMOTE_CODE_EXECUTION]: The transcription rule includes instructions to download the Whisper.cpp binary and AI models using the
@remotion/install-whisper-cpplibrary. This is a functional requirement for local speech-to-text processing. - [DATA_EXFILTRATION]: Multiple rules (e.g., calculate-metadata.md, lottie.md) demonstrate fetching JSON data or assets from remote URLs. While this involves network access, the examples are used to provide dynamic content to compositions, which is a core feature of the framework.
Audit Metadata