remotion-video-production

Pass

Audited by Gen Agent Trust Hub on Mar 21, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the Bash tool to execute npx remotion commands for previewing and rendering video compositions, which is standard practice for this framework.
  • [EXTERNAL_DOWNLOADS]: The use of npx automatically fetches the latest version of the remotion package from the official npm registry during execution.
  • [PROMPT_INJECTION]: The skill is designed to process untrusted user input (video specifications and descriptive prompts) to generate scene plans and video content. While this creates a surface for indirect prompt injection, it is the primary intended function of the skill and no malicious escalation patterns were found.
  • Ingestion points: User-provided video_spec and descriptive prompts for video generation.
  • Boundary markers: The skill uses structured YAML and Markdown templates to organize user input.
  • Capability inventory: Uses Bash for rendering, Write for script creation, and Read for asset verification.
  • Sanitization: Standard LLM guardrails apply to the generation of video scripts.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 21, 2026, 03:28 AM