remotion-best-practices
Pass
Audited by Gen Agent Trust Hub on Mar 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides patterns for using the Remotion CLI to invoke FFmpeg and FFprobe, which are standard utilities for video trimming, metadata extraction, and format conversion in the Remotion ecosystem.
- [EXTERNAL_DOWNLOADS]: The skill guides the user through installing several official and well-known third-party packages, including
@remotion/three,mapbox-gl,@turf/turf, andzod. These downloads are from trusted sources and are central to the skill's purpose. - [EXTERNAL_DOWNLOADS]: Instructions are provided for the
@remotion/install-whisper-cpppackage, which automates the download and installation of the Whisper.cpp binary for audio transcription tasks. - [CREDENTIALS_UNSAFE]: The skill correctly advises users to manage sensitive API keys for Mapbox and ElevenLabs using environment variables and
.envfiles, avoiding hardcoded secrets in the code snippets.
Audit Metadata