{"data":{"skill":{"slug":"101-skills-remotion-render","name":"remotion-render","icon":"📦","repo":"https://github.com/101-skills/skills/tree/main/tools/video/remotion-render/","status":"approved","author":"101-skills","authorVersion":null,"skillstoreRevision":null},"audit":{"id":"8acb3a87-fc0d-4b84-a9a1-3f71d6332ef3","skill_id":"52459684-bf35-4d8d-a92f-8cf778c43695","version":1,"content_hash":"67e5e7a15f898e3e129223e30d0e2f9b","risk_level":"high","is_blocked":false,"safe_to_publish":false,"analysis_status":"ok","agent_auto_install_policy":"confirmation_required","manual_install_policy":"allowed","summary":"Most shell findings are Markdown backticks, tables, or code fences rather than Ruby shell execution. Several examples do instruct users to run belt or npx commands, and the core workflow sends user-provided TSX to inference.sh for remote rendering. No prompt injection text was found in SKILL.md.","remediation":[{"issue":"Remote rendering sends user code and props to inference.sh.","severity":"high","suggestion":"Add a clear privacy warning before render examples and tell users not to include secrets, private source, or private media URLs."},{"issue":"The skill recommends npx commands that install additional skills outside this audit.","severity":"medium","suggestion":"Move related skill installs to plain links, or require users to review each external skill before running install commands."},{"issue":"The required belt CLI and install instructions are external dependencies.","severity":"low","suggestion":"Document the trusted source for belt, authentication requirements, and expected outbound network destinations."}],"risk_factor_evidence":[{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":7,"line_start":7},{"file":"SKILL.md","line_end":17,"line_start":17},{"file":"SKILL.md","line_end":30,"line_start":19},{"file":"SKILL.md","line_end":37,"line_start":30},{"file":"SKILL.md","line_end":38,"line_start":37},{"file":"SKILL.md","line_end":39,"line_start":38},{"file":"SKILL.md","line_end":40,"line_start":39},{"file":"SKILL.md","line_end":41,"line_start":40},{"file":"SKILL.md","line_end":42,"line_start":41},{"file":"SKILL.md","line_end":43,"line_start":42},{"file":"SKILL.md","line_end":44,"line_start":43},{"file":"SKILL.md","line_end":48,"line_start":44},{"file":"SKILL.md","line_end":48,"line_start":48},{"file":"SKILL.md","line_end":66,"line_start":50},{"file":"SKILL.md","line_end":72,"line_start":66},{"file":"SKILL.md","line_end":80,"line_start":72},{"file":"SKILL.md","line_end":84,"line_start":80},{"file":"SKILL.md","line_end":92,"line_start":84},{"file":"SKILL.md","line_end":96,"line_start":92},{"file":"SKILL.md","line_end":98,"line_start":96},{"file":"SKILL.md","line_end":104,"line_start":98},{"file":"SKILL.md","line_end":108,"line_start":104},{"file":"SKILL.md","line_end":117,"line_start":108},{"file":"SKILL.md","line_end":121,"line_start":117},{"file":"SKILL.md","line_end":129,"line_start":121},{"file":"SKILL.md","line_end":133,"line_start":129},{"file":"SKILL.md","line_end":170,"line_start":133},{"file":"SKILL.md","line_end":174,"line_start":170},{"file":"SKILL.md","line_end":186,"line_start":174},{"file":"SKILL.md","line_end":190,"line_start":186},{"file":"SKILL.md","line_end":205,"line_start":190}]},{"factor":"network","evidence":[{"file":"SKILL.md","line_end":11,"line_start":11},{"file":"SKILL.md","line_end":13,"line_start":13},{"file":"SKILL.md","line_end":17,"line_start":17},{"file":"SKILL.md","line_end":209,"line_start":209},{"file":"SKILL.md","line_end":210,"line_start":210},{"file":"SKILL.md","line_end":211,"line_start":211}]}],"critical_findings":[],"high_findings":[{"title":"Remote Code And Data Submission","locations":[{"file":"SKILL.md","line_end":29,"line_start":23},{"file":"SKILL.md","line_end":37,"line_start":37}],"confidence":0.88,"description":"The quick start sends user-provided Remotion TSX as the code input to infsh/remotion-render through belt. This can expose proprietary component code, props, and media references to inference.sh.","review_kind":"security","source_category":"semantic","source_severity":"high","confidence_reasoning":"The examples and input schema directly show a required code field sent through the external belt app. This confirms intended third-party processing, not local-only rendering."}],"medium_findings":[{"title":"Ruby/shell backtick execution","locations":[{"file":"SKILL.md","line_end":7,"line_start":7}],"confidence":0.8,"description":"> **Install the belt CLI skill:** `npx skills add belt-sh/cli`","review_kind":"capability","source_category":"external_commands","source_severity":"medium","confidence_reasoning":"This line instructs users to run npx to install another CLI skill from outside this skill. That is a real external command and supply-chain risk, even though it appears as Markdown inline code."},{"title":"Ruby/shell backtick execution","locations":[{"file":"SKILL.md","line_end":30,"line_start":19}],"confidence":0.9,"description":"```bash","review_kind":"capability","source_category":"external_commands","source_severity":"medium","confidence_reasoning":"The quick start block includes belt login and belt app run commands that submit TSX code to a remote renderer. This is intentional functionality, but it is real external command execution."},{"title":"Ruby/shell backtick execution","locations":[{"file":"SKILL.md","line_end":80,"line_start":72}],"confidence":0.86,"description":"```bash","review_kind":"capability","source_category":"external_commands","source_severity":"medium","confidence_reasoning":"The example invokes belt app run with Remotion code and render settings. It executes an external CLI and sends the input to the remote inference.sh app."},{"title":"Ruby/shell backtick execution","locations":[{"file":"SKILL.md","line_end":92,"line_start":84}],"confidence":0.86,"description":"```bash","review_kind":"capability","source_category":"external_commands","source_severity":"medium","confidence_reasoning":"The example invokes belt app run with a full Remotion component payload. This is a real external command that sends user-provided code to the rendering service."},{"title":"Ruby/shell backtick execution","locations":[{"file":"SKILL.md","line_end":98,"line_start":96}],"confidence":0.84,"description":"```bash","review_kind":"capability","source_category":"external_commands","source_severity":"medium","confidence_reasoning":"This code block includes a belt app run command for a Remotion render. The command is expected, but it is still external CLI execution against a remote app."},{"title":"Ruby/shell backtick execution","locations":[{"file":"SKILL.md","line_end":117,"line_start":108}],"confidence":0.86,"description":"```bash","review_kind":"capability","source_category":"external_commands","source_severity":"medium","confidence_reasoning":"The example invokes belt app run and includes props with the submitted component code. This is a real external command and remote processing flow."},{"title":"Ruby/shell backtick execution","locations":[{"file":"SKILL.md","line_end":129,"line_start":121}],"confidence":0.86,"description":"```bash","review_kind":"capability","source_category":"external_commands","source_severity":"medium","confidence_reasoning":"The sequence animation example uses belt app run to submit code for rendering. That is legitimate for the skill, but it confirms external command execution."},{"title":"Ruby/shell backtick execution","locations":[{"file":"SKILL.md","line_end":205,"line_start":190}],"confidence":0.82,"description":"```bash","review_kind":"capability","source_category":"external_commands","source_severity":"medium","confidence_reasoning":"The related skills block recommends multiple npx skills add commands for additional packages outside this audit. Those are real external install commands and should be reviewed before use."}],"low_findings":[{"title":"Hardcoded URL","locations":[{"file":"SKILL.md","line_end":11,"line_start":11}],"confidence":0.76,"description":"Render videos from React/Remotion component code via [inference.sh](https://inference.sh) CLI.","review_kind":"capability","source_category":"network","source_severity":"low","confidence_reasoning":"This line identifies inference.sh as the external service used by the skill. The later render examples send user code to that service, so the network dependency is real."},{"title":"Hardcoded URL","locations":[{"file":"SKILL.md","line_end":13,"line_start":13}],"confidence":0.72,"description":"![Remotion Render](https://cloud.inference.sh/app/files/u/4mg21r6ta37mpaz6ktzwtt8krr/01kg2c0egyg243m","review_kind":"capability","source_category":"network","source_severity":"low","confidence_reasoning":"The Markdown image is hosted on cloud.inference.sh and can trigger an external fetch when rendered. This is low severity but a real hardcoded external content dependency."},{"title":"Hardcoded URL","locations":[{"file":"SKILL.md","line_end":17,"line_start":17}],"confidence":0.74,"description":"> Requires inference.sh CLI (`belt`). [Install instructions](https://raw.githubusercontent.com/infer","review_kind":"capability","source_category":"network","source_severity":"low","confidence_reasoning":"The required CLI installation instructions are loaded from a hardcoded raw.githubusercontent.com URL. That creates a low severity external supply-chain dependency."}],"dangerous_patterns":[],"files_scanned":1,"total_lines":213,"audit_model":"codex","audited_at":"2026-07-08T14:11:03.099+00:00","created_at":"2026-07-08T23:35:48.940061+00:00","static_findings":[{"id":"external_commands:SKILL.md:7:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"> **Install the belt CLI skill:** `npx skills add belt-sh/cli`","category":"external_commands","line_end":7,"severity":"medium","line_start":7},{"id":"external_commands:SKILL.md:17:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"> Requires inference.sh CLI (`belt`). [Install instructions](https://raw.githubusercontent.com/infer","category":"external_commands","line_end":17,"severity":"medium","line_start":17},{"id":"external_commands:SKILL.md:19:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":30,"severity":"medium","line_start":19},{"id":"external_commands:SKILL.md:30:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":37,"severity":"medium","line_start":30},{"id":"external_commands:SKILL.md:37:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| `code` | string | Yes | React component TSX code. Must export default a component. |","category":"external_commands","line_end":38,"severity":"medium","line_start":37},{"id":"external_commands:SKILL.md:38:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| `composition_id` | string | No | Composition ID to render |","category":"external_commands","line_end":39,"severity":"medium","line_start":38},{"id":"external_commands:SKILL.md:39:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| `props` | object | No | Props passed to the component |","category":"external_commands","line_end":40,"severity":"medium","line_start":39},{"id":"external_commands:SKILL.md:40:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| `width` | number | No | Video width in pixels |","category":"external_commands","line_end":41,"severity":"medium","line_start":40},{"id":"external_commands:SKILL.md:41:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| `height` | number | No | Video height in pixels |","category":"external_commands","line_end":42,"severity":"medium","line_start":41},{"id":"external_commands:SKILL.md:42:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| `fps` | number | No | Frames per second |","category":"external_commands","line_end":43,"severity":"medium","line_start":42},{"id":"external_commands:SKILL.md:43:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| `duration_seconds` | number | No | Video duration in seconds |","category":"external_commands","line_end":44,"severity":"medium","line_start":43},{"id":"external_commands:SKILL.md:44:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| `codec` | string | No | Output codec |","category":"external_commands","line_end":48,"severity":"medium","line_start":44},{"id":"external_commands:SKILL.md:48:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"Your TSX code can import from `remotion` and `react`:","category":"external_commands","line_end":48,"severity":"medium","line_start":48},{"id":"external_commands:SKILL.md:50:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```tsx","category":"external_commands","line_end":66,"severity":"medium","line_start":50},{"id":"external_commands:SKILL.md:66:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":72,"severity":"medium","line_start":66},{"id":"external_commands:SKILL.md:72:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":80,"severity":"medium","line_start":72},{"id":"external_commands:SKILL.md:80:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":84,"severity":"medium","line_start":80},{"id":"external_commands:SKILL.md:84:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":92,"severity":"medium","line_start":84},{"id":"external_commands:SKILL.md:92:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":96,"severity":"medium","line_start":92},{"id":"external_commands:SKILL.md:96:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":98,"severity":"medium","line_start":96},{"id":"external_commands:SKILL.md:98:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"\"code\": \"import { useCurrentFrame, useVideoConfig, spring, AbsoluteFill } from \\\"remotion\\\"; export ","category":"external_commands","line_end":104,"severity":"medium","line_start":98},{"id":"external_commands:SKILL.md:104:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":108,"severity":"medium","line_start":104},{"id":"external_commands:SKILL.md:108:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":117,"severity":"medium","line_start":108},{"id":"external_commands:SKILL.md:117:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":121,"severity":"medium","line_start":117},{"id":"external_commands:SKILL.md:121:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":129,"severity":"medium","line_start":121},{"id":"external_commands:SKILL.md:129:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":133,"severity":"medium","line_start":129},{"id":"external_commands:SKILL.md:133:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```python","category":"external_commands","line_end":170,"severity":"medium","line_start":133},{"id":"external_commands:SKILL.md:170:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":174,"severity":"medium","line_start":170},{"id":"external_commands:SKILL.md:174:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```python","category":"external_commands","line_end":186,"severity":"medium","line_start":174},{"id":"external_commands:SKILL.md:186:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":190,"severity":"medium","line_start":186},{"id":"external_commands:SKILL.md:190:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":205,"severity":"medium","line_start":190},{"id":"network:SKILL.md:11:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"Render videos from React/Remotion component code via [inference.sh](https://inference.sh) CLI.","category":"network","line_end":11,"severity":"low","line_start":11},{"id":"network:SKILL.md:13:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"![Remotion Render](https://cloud.inference.sh/app/files/u/4mg21r6ta37mpaz6ktzwtt8krr/01kg2c0egyg243m","category":"network","line_end":13,"severity":"low","line_start":13},{"id":"network:SKILL.md:17:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"> Requires inference.sh CLI (`belt`). [Install instructions](https://raw.githubusercontent.com/infer","category":"network","line_end":17,"severity":"low","line_start":17},{"id":"network:SKILL.md:209:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"- [Remotion Documentation](https://www.remotion.dev/docs) - Official Remotion docs","category":"network","line_end":209,"severity":"low","line_start":209},{"id":"network:SKILL.md:210:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"- [Running Apps](https://inference.sh/docs/apps/running) - How to run apps via CLI","category":"network","line_end":210,"severity":"low","line_start":210},{"id":"network:SKILL.md:211:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"- [Streaming Results](https://inference.sh/docs/api/sdk/streaming) - Real-time progress updates","category":"network","line_end":211,"severity":"low","line_start":211}],"finding_verdicts":[{"id":"external_commands:SKILL.md:7:ruby-shell-backtick-execution","reason":"This line instructs users to run npx to install another CLI skill from outside this skill. That is a real external command and supply-chain risk, even though it appears as Markdown inline code.","verdict":"confirmed","severity":"medium","confidence":0.8},{"id":"external_commands:SKILL.md:17:ruby-shell-backtick-execution","reason":"This line names the belt CLI and links installation instructions; the backticks are Markdown inline code, not shell backtick execution.","verdict":"false_positive","confidence":0.9},{"id":"external_commands:SKILL.md:19:ruby-shell-backtick-execution","reason":"The quick start block includes belt login and belt app run commands that submit TSX code to a remote renderer. This is intentional functionality, but it is real external command execution.","verdict":"confirmed","severity":"medium","confidence":0.9},{"id":"external_commands:SKILL.md:30:ruby-shell-backtick-execution","reason":"This finding points at a Markdown code fence boundary. It does not contain a shell command or Ruby backtick execution.","verdict":"false_positive","confidence":0.9},{"id":"external_commands:SKILL.md:37:ruby-shell-backtick-execution","reason":"This is an input schema table row where backticks format parameter names. It does not execute commands or interpolate shell input.","verdict":"false_positive","confidence":0.9},{"id":"external_commands:SKILL.md:38:ruby-shell-backtick-execution","reason":"This is an input schema table row where backticks format parameter names. It does not execute commands or interpolate shell input.","verdict":"false_positive","confidence":0.9},{"id":"external_commands:SKILL.md:39:ruby-shell-backtick-execution","reason":"This is an input schema table row where backticks format parameter names. It does not execute commands or interpolate shell input.","verdict":"false_positive","confidence":0.9},{"id":"external_commands:SKILL.md:40:ruby-shell-backtick-execution","reason":"This is an input schema table row where backticks format parameter names. It does not execute commands or interpolate shell input.","verdict":"false_positive","confidence":0.9},{"id":"external_commands:SKILL.md:41:ruby-shell-backtick-execution","reason":"This is an input schema table row where backticks format parameter names. It does not execute commands or interpolate shell input.","verdict":"false_positive","confidence":0.9},{"id":"external_commands:SKILL.md:42:ruby-shell-backtick-execution","reason":"This is an input schema table row where backticks format parameter names. It does not execute commands or interpolate shell input.","verdict":"false_positive","confidence":0.9},{"id":"external_commands:SKILL.md:43:ruby-shell-backtick-execution","reason":"This is an input schema table row where backticks format parameter names. It does not execute commands or interpolate shell input.","verdict":"false_positive","confidence":0.9},{"id":"external_commands:SKILL.md:44:ruby-shell-backtick-execution","reason":"This is an input schema table row where backticks format parameter names. It does not execute commands or interpolate shell input.","verdict":"false_positive","confidence":0.9},{"id":"external_commands:SKILL.md:48:ruby-shell-backtick-execution","reason":"This line uses Markdown inline code to name allowed imports. There is no command execution on this line.","verdict":"false_positive","confidence":0.9},{"id":"external_commands:SKILL.md:50:ruby-shell-backtick-execution","reason":"This is a TSX import example inside a fenced code block. It is not shell backtick execution.","verdict":"false_positive","confidence":0.9},{"id":"external_commands:SKILL.md:66:ruby-shell-backtick-execution","reason":"This finding points at a Markdown code fence boundary. It does not contain a shell command or Ruby backtick execution.","verdict":"false_positive","confidence":0.9},{"id":"external_commands:SKILL.md:72:ruby-shell-backtick-execution","reason":"The example invokes belt app run with Remotion code and render settings. It executes an external CLI and sends the input to the remote inference.sh app.","verdict":"confirmed","severity":"medium","confidence":0.86},{"id":"external_commands:SKILL.md:80:ruby-shell-backtick-execution","reason":"This finding points at a Markdown code fence boundary. It does not contain a shell command or Ruby backtick execution.","verdict":"false_positive","confidence":0.9},{"id":"external_commands:SKILL.md:84:ruby-shell-backtick-execution","reason":"The example invokes belt app run with a full Remotion component payload. This is a real external command that sends user-provided code to the rendering service.","verdict":"confirmed","severity":"medium","confidence":0.86},{"id":"external_commands:SKILL.md:92:ruby-shell-backtick-execution","reason":"This finding points at a Markdown code fence boundary. It does not contain a shell command or Ruby backtick execution.","verdict":"false_positive","confidence":0.9},{"id":"external_commands:SKILL.md:96:ruby-shell-backtick-execution","reason":"This code block includes a belt app run command for a Remotion render. The command is expected, but it is still external CLI execution against a remote app.","verdict":"confirmed","severity":"medium","confidence":0.84},{"id":"external_commands:SKILL.md:98:ruby-shell-backtick-execution","reason":"The backticks are part of a JavaScript template literal inside sample TSX code. They are not Ruby or shell command execution.","verdict":"false_positive","confidence":0.9},{"id":"external_commands:SKILL.md:104:ruby-shell-backtick-execution","reason":"This finding points at a Markdown code fence boundary. It does not contain a shell command or Ruby backtick execution.","verdict":"false_positive","confidence":0.9},{"id":"external_commands:SKILL.md:108:ruby-shell-backtick-execution","reason":"The example invokes belt app run and includes props with the submitted component code. This is a real external command and remote processing flow.","verdict":"confirmed","severity":"medium","confidence":0.86},{"id":"external_commands:SKILL.md:117:ruby-shell-backtick-execution","reason":"This finding points at a Markdown code fence boundary. It does not contain a shell command or Ruby backtick execution.","verdict":"false_positive","confidence":0.9},{"id":"external_commands:SKILL.md:121:ruby-shell-backtick-execution","reason":"The sequence animation example uses belt app run to submit code for rendering. That is legitimate for the skill, but it confirms external command execution.","verdict":"confirmed","severity":"medium","confidence":0.86},{"id":"external_commands:SKILL.md:129:ruby-shell-backtick-execution","reason":"This finding points at a Markdown code fence boundary. It does not contain a shell command or Ruby backtick execution.","verdict":"false_positive","confidence":0.9},{"id":"external_commands:SKILL.md:133:ruby-shell-backtick-execution","reason":"This is a Python SDK example, not a shell backtick execution site. The remote processing risk is handled as a semantic finding.","verdict":"false_positive","confidence":0.84},{"id":"external_commands:SKILL.md:170:ruby-shell-backtick-execution","reason":"This finding points at a Markdown code fence boundary. It does not contain a shell command or Ruby backtick execution.","verdict":"false_positive","confidence":0.9},{"id":"external_commands:SKILL.md:174:ruby-shell-backtick-execution","reason":"This is a Python streaming example, not shell backtick execution. It does not create a shell command injection vector by itself.","verdict":"false_positive","confidence":0.84},{"id":"external_commands:SKILL.md:186:ruby-shell-backtick-execution","reason":"This finding points at a Markdown code fence boundary. It does not contain a shell command or Ruby backtick execution.","verdict":"false_positive","confidence":0.9},{"id":"external_commands:SKILL.md:190:ruby-shell-backtick-execution","reason":"The related skills block recommends multiple npx skills add commands for additional packages outside this audit. Those are real external install commands and should be reviewed before use.","verdict":"confirmed","severity":"medium","confidence":0.82},{"id":"network:SKILL.md:11:hardcoded-url","reason":"This line identifies inference.sh as the external service used by the skill. The later render examples send user code to that service, so the network dependency is real.","verdict":"confirmed","severity":"low","confidence":0.76},{"id":"network:SKILL.md:13:hardcoded-url","reason":"The Markdown image is hosted on cloud.inference.sh and can trigger an external fetch when rendered. This is low severity but a real hardcoded external content dependency.","verdict":"confirmed","severity":"low","confidence":0.72},{"id":"network:SKILL.md:17:hardcoded-url","reason":"The required CLI installation instructions are loaded from a hardcoded raw.githubusercontent.com URL. That creates a low severity external supply-chain dependency.","verdict":"confirmed","severity":"low","confidence":0.74},{"id":"network:SKILL.md:209:hardcoded-url","reason":"This is an informational documentation link. It does not cause the skill to automatically send user data or execute remote content.","verdict":"false_positive","confidence":0.86},{"id":"network:SKILL.md:210:hardcoded-url","reason":"This is an informational documentation link. It does not cause the skill to automatically send user data or execute remote content.","verdict":"false_positive","confidence":0.86},{"id":"network:SKILL.md:211:hardcoded-url","reason":"This is an informational documentation link. It does not cause the skill to automatically send user data or execute remote content.","verdict":"false_positive","confidence":0.86}],"semantic_findings":[{"title":"Remote Code And Data Submission","severity":"high","locations":[{"file":"SKILL.md","line_end":29,"line_start":23},{"file":"SKILL.md","line_end":37,"line_start":37}],"confidence":0.88,"description":"The quick start sends user-provided Remotion TSX as the code input to infsh/remotion-render through belt. This can expose proprietary component code, props, and media references to inference.sh.","confidence_reasoning":"The examples and input schema directly show a required code field sent through the external belt app. This confirms intended third-party processing, not local-only rendering."}],"subject_marketplace_commit_sha":null,"subject_content_hash":null,"subject_tree_hash":null,"subject_plugin_path":null,"audit_payload_hash":null,"confirmed_risk_level":null,"scanner_version":null,"policy_version":null,"subject":{"marketplaceCommitSha":null,"contentHash":null,"treeHash":null,"pluginPath":null,"auditPayloadHash":null},"scannerVersion":null,"policyVersion":null},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"not_attestable","url":null,"status":null,"reason":"confirmed_risk_level does not match the canonical trust resolver"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"high","confirmedFindingCount":1,"capabilityReviewCount":11,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"confirmation_required","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"not_attestable","verificationState":"not_verified"},"isLatest":false}}