srt-remotion-video
Pass
Audited by Gen Agent Trust Hub on May 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
spawnSyncand shell commands in several scripts to automate the development environment. scripts/ensure-template-deps.jsexecutesnpm installandnpm --versionto manage local project dependencies.SKILL.mdinstructs the agent to runnpx remotion renderfor video synthesis andnpx remotion studiofor previewing.- [EXTERNAL_DOWNLOADS]: The project downloads standard Node.js packages (e.g.,
remotion,react,lucide-react) from the official npm registry as part of the project initialization process. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided SRT files, which are used as input for sub-agents to generate React code and storyboard plans. This creates a potential attack surface where malicious text in an SRT could attempt to influence the LLM's code generation logic.
- Ingestion points: SRT files provided by the user via the
srtPathparameter. - Boundary markers: The sub-agent prompts in
SKILL.mduse structural instructions but lack explicit delimiters or "ignore instructions" wrappers for the ingested text. - Capability inventory: The skill can execute shell commands, write files to the local system, and execute generated React code via the Remotion renderer.
- Sanitization: The skill includes several validation scripts (
validate-project.js,validate-scene-plan.js) that check for structural integrity and timing constraints, though they do not perform semantic sanitization of the subtitle content itself.
Audit Metadata