claude-typer

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/render_claude_typer.py invokes subprocess.run() to launch the Remotion CLI. It handles command invocation securely by passing an argument array rather than a single string, and it executes without a shell wrapper (shell=False), mitigating common command injection vectors.
  • [EXTERNAL_DOWNLOADS]: The script invokes npx to resolve and download @remotion/cli and @remotion/tailwind-v4 dynamically from the official npm registry when local binaries are unavailable. The dependencies specify a fixed version (4.0.440) and originate from a reputable public ecosystem, representing standard technological workflow.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 12:12 PM
Security Audit — agent-trust-hub — claude-typer