personal-brand-video
Warn
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS] (MEDIUM): The skill instructions in
README.mdandSKILL.mdprompt the user to executenpx skills add https://github.com/remotion-dev/skills. The organizationremotion-devis not included in the 'Trusted GitHub Organizations' list, making this an unverified external download. - [REMOTE_CODE_EXECUTION] (MEDIUM): Suggesting the installation of a skill via a remote URL (using
npx skills add) allows for the fetching and execution of remote logic. Since the source is not a pre-approved trusted repository, there is a risk that the remote content could contain malicious instructions or scripts. - [PROMPT_INJECTION] (SAFE): The instructions follow a clear workflow for video creation and do not contain patterns typical of prompt injection or safety bypass attempts.
- [DATA_EXFILTRATION] (SAFE): No evidence of unauthorized network calls, hardcoded credentials, or sensitive file access was found within the analyzed files.
Audit Metadata