Habilidades remotion-markup

📦

remotion-markup

Name: remotion-markup
Author: remotion-dev

Revisión del contenido r1 Riesgo alto ⚙️ Comandos externos🌐 Acceso a red📁 Acceso al sistema de archivos🔑 Variables de entorno

Build polished Remotion video markup

Building video compositions can require many React, timing, and media decisions. This skill provides focused Remotion patterns for creating maintainable video markup.

Compatible con: Claude Codex Code(CC)

⚠️ 38 Deficiente

Maintain this Skill? Claim it ⚠️ 38 Deficiente

Detente y solicita confirmación antes de instalar.

Revisa el plan y obtén el consentimiento explícito del usuario antes de modificar archivos.

Instalar con mi Agente

Copia esta solicitud en tu Agente. Incluye la página canónica del Skill y el manifiesto.

Solicitud de agente

Review the Skillstore skill "remotion-markup" from https://skillstore.io/skills/remotion-dev-remotion-markup.md and its manifest at https://skillstore.io/api/skills/remotion-dev-remotion-markup/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Tu Agente debe seguir mostrando su plan y solicitar cualquier confirmación exigida por la política de seguridad.

Recursos legibles por agentes

Usa estos enlaces cuando un agente de IA, crawler o script necesite contexto limpio en vez de leer la página completa.

Detalle Markdown GET /skills/remotion-dev-remotion-markup.md Manifest firmado GET /api/skills/remotion-dev-remotion-markup/manifest Lockfile firmado GET /api/skills/remotion-dev-remotion-markup/lockfile

Pruébalo

Usando "remotion-markup". Create a title card that appears during the first second.

Resultado esperado:

A composition outline with a full-frame title card.
Frame-based opacity and scale timing guidance.
Suggested accessibility and layout checks.

Usando "remotion-markup". Make my composition match the duration of an audio file.

Resultado esperado:

A calculateMetadata approach for measuring audio duration.
A frame-duration calculation using the selected FPS.
A note to validate asset locations before rendering.

Usando "remotion-markup". Add a MapLibre map background.

Resultado esperado:

A map composition structure using a reviewed style source.
Guidance for deterministic map rendering.
Notes about network access and asset ownership.

Auditoría de seguridad

Riesgo alto

v1 • 20/7/2026 Abrir el informe versionado

Most static detections are false positives caused by Markdown fences, JavaScript template literals, relative documentation links, and public example URLs. One example fetches an unvalidated caller-provided URL, which can enable server-side request forgery in server rendering contexts. The voiceover example also constructs an output path from unvalidated identifiers.

Archivos escaneados

4,145

Líneas analizadas

Elementos de revisión

Falsos positivos ignorados

Preocupaciones de seguridad confirmadas (1)

Alto

voiceover.md:26 voiceover.md:53

Unvalidated identifiers in generated audio path

The voiceover example writes a file path built from compositionId and scene.id without showing validation. If those values are untrusted, path segments can escape the intended public/voiceover directory and overwrite files available to the process.

The documentation explicitly states that the script reads scene config and then interpolates two identifiers into writeFileSync. Exploitability depends on whether callers control those identifiers, but no path normalization or allowlist is shown.

Elementos de revisión de capacidades (1)

Estas son capacidades locales reales que pueden esperarse para esta habilidad, por lo que requieren revisión, pero no se cuentan como comportamiento malicioso confirmado.

Bajo

calculate-metadata.md:112

Fetch API call

const response = await fetch(props.dataUrl, { signal: abortSignal });

The example fetches the caller-controlled props.dataUrl without validation. In a server-side render workflow, an untrusted URL could reach internal network services.

Factores de riesgo

⚙️ Comandos externos (50)

🌐 Acceso a red (25)

📁 Acceso al sistema de archivos (9)

calculate-metadata.md:29 calculate-metadata.md:48 silence-detection.md:19 silence-detection.md:31 SKILL.md:9 SKILL.md:193 text-highlights.md:56 voiceover.md:53 voiceover.md:58

🔑 Variables de entorno (10)

mapbox.md:59 mapbox.md:76 mapbox.md:152 mapbox.md:59 mapbox.md:76 mapbox.md:152 voiceover.md:36 voiceover.md:36 voiceover.md:14 voiceover.md:36

Auditado por: claude

Compartir y citar este informe

Comparte el informe de evaluación versionado, la insignia neutral, la tarjeta insertable y las citas. Skillstore presenta evidencias sin decidir si este Skill es seguro.

Abrir el informe versionado

Copiar enlace del informe

https://skillstore.io/skills/remotion-dev-remotion-markup/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Insignia Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/remotion-dev-remotion-markup/security.svg)](https://skillstore.io/skills/remotion-dev-remotion-markup?utm_source=security_passport_badge)

Insignia HTML

<a href="https://skillstore.io/skills/remotion-dev-remotion-markup?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/remotion-dev-remotion-markup/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Tarjeta para insertar

<iframe src="https://skillstore.io/embed/skills/remotion-dev-remotion-markup.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Citas académicas (APA · BibTeX · CFF)

Cita APA

remotion-dev. (2026). remotion-markup security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/remotion-dev-remotion-markup/audits/1

Cita BibTeX

@techreport{remotion-dev-remotion-dev-remotion-markup-2026,
  author = {remotion-dev},
  title = {remotion-markup security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/remotion-dev-remotion-markup/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "remotion-markup security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "remotion-dev"
date-released: "2026-07-20"
url: "https://skillstore.io/skills/remotion-dev-remotion-markup/audits/1"
identifiers:
  - type: other
    value: "skillstore:remotion-dev-remotion-markup:audit:1"
    description: "Skillstore immutable audit report identifier"

Puntuación de Skillstore

Por qué esta puntuación Confianza de la evidencia: Medio

Arquitectura

Mantenibilidad

Contenido

Comunidad

Cumplimiento de la especificación

Lo que puedes crear

Create a product video

Build a React composition with animated text, images, audio, and scene timing.

Edit a video timeline

Trim clips, sequence scenes, and calculate duration for a multi-part composition.

Add narrated explainers

Generate scene audio with an approved TTS provider and match composition length to audio.

Prueba estos prompts

Start a composition

Create a simple Remotion composition with a title, background color, and fade-in animation.

Add media assets

Add an image sequence and background audio to my Remotion composition. Use local public assets and explain the timing.

Build a scene timeline

Help me sequence three video scenes with trims, overlaps, and a transition at 30 frames per second.

Design dynamic metadata

Design a calculateMetadata function for my Remotion composition. Validate external URLs and keep all fetched data within approved limits.

Mejores prácticas

Use local or approved media assets when rendering production videos.
Keep timing calculations in frames and define the composition FPS clearly.
Validate external URLs and dynamic asset identifiers before server-side rendering.

Evitar

Do not place unvalidated user identifiers directly into output file paths.
Do not fetch arbitrary user-provided URLs from a rendering server.
Do not depend on remote media without considering availability, licensing, and caching.