remotion
Pass
Audited by Gen Agent Trust Hub on Mar 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides patterns for downloading and installing external assets and binaries necessary for its functionality.\n
rules/transcribe-captions.mdutilizes the@remotion/install-whisper-cpppackage to download the Whisper.cpp binary and speech-to-text models for local transcription.\nrules/sfx.mdreferences external sound assets hosted on a third-party GitHub repository (github.com/kapishdima/soundcn).\n- [COMMAND_EXECUTION]: Several rules document the execution of system commands and local scripts to facilitate video rendering and processing.\nSKILL.mddescribes a rendering workflow that executes a local script at/root/code/render-video-modal.ts.\nrules/ffmpeg.mdandrules/transcribe-captions.mdprovide instructions for runningffmpeg,ffprobe, and Node.js-based scripts usingbunandbunx.\n- [REMOTE_CODE_EXECUTION]: The skill includes logic for external service communication and dynamic code bundling.\nrules/voiceover.mdcontains a script for generating audio by making network requests to the ElevenLabs TTS API.\nscripts/render.mjsuses@remotion/bundlerto dynamically compile and bundle the React project at runtime during the rendering process.\n- [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface due to its data-driven nature.\n- Ingestion points: The skill fetches and processes data from external URLs in
calculateMetadata(rules/calculate-metadata.md), parses local caption files (rules/display-captions.md), and loads remote Lottie JSON assets (rules/lottie.md).\n - Boundary markers: No explicit boundary markers or "ignore" instructions were found in the provided processing templates.\n
- Capability inventory: The skill has the ability to write files (
fs.writeFileSync), perform network operations (fetch), and execute shell commands (bunx).\n - Sanitization: There is no explicit sanitization or validation logic described for external content before it is interpolated into component props or processed.
Audit Metadata