remotion-render
Pass
Audited by Gen Agent Trust Hub on Mar 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill makes use of the
infshcommand-line interface to execute rendering tasks on a remote server. This is the core functionality provided by the service. - [EXTERNAL_DOWNLOADS]: The documentation points to external dependencies such as the
infshCLI and other skills hosted on inference.sh, which are recognized as standard components for this author's tools. - [PROMPT_INJECTION]: The skill's primary interface accepts arbitrary React/TSX code. This allows for an indirect prompt injection surface where instructions could be embedded in the code. Analysis: 1. Ingestion:
codeparameter. 2. Boundaries: Absent. 3. Capabilities:infshBash execution. 4. Sanitization: Absent. This risk is acknowledged as part of the intended code-rendering utility.
Audit Metadata