remotion-video-production
Pass
Audited by Gen Agent Trust Hub on Mar 12, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill translates user-provided video descriptions into Remotion (React/TypeScript) code, creating an indirect prompt injection surface.
- Ingestion points: User prompts and video specifications defined in Step 1 and Examples.
- Boundary markers: Absent; there are no explicit delimiters or instructions to ignore embedded commands in the user input.
- Capability inventory: The skill utilizes Bash, Write, and Read tools to manage assets and execute rendering commands.
- Sanitization: Not specified in the instructions.
- [COMMAND_EXECUTION]: The skill uses the Bash tool to execute 'npx remotion' for previewing and rendering video content. This is the primary intended function of the skill and involves running code generated by the agent based on user input.
Audit Metadata