remotion-best-practices-2

Pass

Audited by Gen Agent Trust Hub on Mar 17, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions to install official @remotion scope packages (e.g., @remotion/three, @remotion/media, @remotion/captions, @remotion/lottie) and the mediabunny library via standard package managers using the remotion add command.
  • [DATA_EXFILTRATION]: Contains patterns for fetching external data using the fetch() API for retrieving Lottie animation JSON files, SRT subtitles, and dynamic composition metadata. These operations target well-known or example domains such as lottiefiles.com and remotion.dev.
  • [COMMAND_EXECUTION]: Demonstrates the use of shell commands (npx, yarn, pnpm) for package management and project integration tasks.
  • [PROMPT_INJECTION]: Includes an instruction for the agent to use WebFetch to retrieve official Tailwind CSS documentation from remotion.dev, which serves as an indirect ingestion point for external content.
  • Ingestion points: Documentation retrieval in rules/tailwind.md and dynamic metadata fetching in rules/calculate-metadata.md.
  • Boundary markers: None specified in the provided code snippets.
  • Capability inventory: Package installation via remotion add and network requests via fetch.
  • Sanitization: Not demonstrated in the simplified best-practice examples.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 17, 2026, 07:05 AM