Remotion Cn

• Outcome: Pass
• Latest audit: May 28, 2026 at 4:46 AM UTC
• Version:
  1.0.0

Overview

This is a documentation-only Chinese Remotion tutorial skill with an optional AI code example, not a hidden or automatic data-access tool.

Safe to install as a Remotion learning aid. Before running examples, remember that npm/npx downloads third-party packages, and do not put secrets, personal data, or confidential project details into the optional AI code-generation prompt unless you intend to send them to that API provider.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 86% confidence
• Finding: The AI integration example sends user-provided video descriptions to an external API without any notice about privacy, data retention, or safe handling of sensitive content. In a skill context, users may paste proprietary prompts, customer data, or confidential project details, causing unintended disclosure to a third-party service.

VirusTotal

64/64 vendors flagged this skill as clean.