remotion-video-production
Pass
Audited by Gen Agent Trust Hub on Mar 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the Bash tool to execute
npx remotioncommands for previewing and rendering video compositions, which is standard practice for this framework. - [EXTERNAL_DOWNLOADS]: The use of
npxautomatically fetches the latest version of theremotionpackage from the official npm registry during execution. - [PROMPT_INJECTION]: The skill is designed to process untrusted user input (video specifications and descriptive prompts) to generate scene plans and video content. While this creates a surface for indirect prompt injection, it is the primary intended function of the skill and no malicious escalation patterns were found.
- Ingestion points: User-provided
video_specand descriptive prompts for video generation. - Boundary markers: The skill uses structured YAML and Markdown templates to organize user input.
- Capability inventory: Uses
Bashfor rendering,Writefor script creation, andReadfor asset verification. - Sanitization: Standard LLM guardrails apply to the generation of video scripts.
Audit Metadata