remotion-create
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands including
npx create-video,npm install, andnpx remotion studioto scaffold projects and manage the development environment. - [EXTERNAL_DOWNLOADS]: The skill downloads project templates and dependencies from the npm registry as part of the standard initialization process for Remotion projects.
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to inspect the current directory contents, including hidden files, to decide where to scaffold the project. This is a routine data ingestion surface used for file system state evaluation.
Audit Metadata