remotion-video

Pass

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS] (SAFE): The skill references official @remotion scoped packages and legitimate third-party service APIs (ZapCap, Submagic). All downloads and installations target standard registries.
  • [COMMAND_EXECUTION] (SAFE): Shell commands provided (npm install, npx) are standard for JavaScript development environments and are used for installing official framework utilities.
  • [CREDENTIALS_UNSAFE] (SAFE): The code correctly demonstrates the use of environment variables (process.env.ZAPCAP_API_KEY) for sensitive credentials rather than hardcoding secrets.
  • [DATA_EXFILTRATION] (SAFE): Network requests are directed to legitimate API endpoints (api.zapcap.ai) and are consistent with the skill's stated purpose of video transcription.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 17, 2026, 06:39 PM