📦

remotion-markup

Name: remotion-markup
Author: remotion-dev

Révision du contenu r1 Risque élevé ⚙️ Commandes externes🌐 Accès réseau📁 Accès au système de fichiers🔑 Variables d’environnement

Build polished Remotion video markup

Building video compositions can require many React, timing, and media decisions. This skill provides focused Remotion patterns for creating maintainable video markup.

Prend en charge: Claude Codex Code(CC)

⚠️ 38 Médiocre

Maintain this Skill? Claim it ⚠️ 38 Médiocre

Arrêtez-vous et demandez confirmation avant l’installation.

Examinez le plan et obtenez le consentement explicite de l’utilisateur avant de modifier des fichiers.

Installer avec mon Agent

Copiez cette demande dans votre Agent. Elle contient la page Skill de référence et le manifeste.

Demande d’agent

Review the Skillstore skill "remotion-markup" from https://skillstore.io/skills/remotion-dev-remotion-markup.md and its manifest at https://skillstore.io/api/skills/remotion-dev-remotion-markup/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Votre Agent doit toujours présenter son plan et demander toute confirmation exigée par la politique de sécurité.

Ressources lisibles par les agents

Utilisez ces liens lorsqu’un Agent IA, un crawler ou un script a besoin d’un contexte propre au lieu de lire toute la page.

Détail Markdown GET /skills/remotion-dev-remotion-markup.md manifest signé GET /api/skills/remotion-dev-remotion-markup/manifest lockfile signé GET /api/skills/remotion-dev-remotion-markup/lockfile

Tester

Utilisation de « remotion-markup ». Create a title card that appears during the first second.

Résultat attendu:

A composition outline with a full-frame title card.
Frame-based opacity and scale timing guidance.
Suggested accessibility and layout checks.

Utilisation de « remotion-markup ». Make my composition match the duration of an audio file.

Résultat attendu:

A calculateMetadata approach for measuring audio duration.
A frame-duration calculation using the selected FPS.
A note to validate asset locations before rendering.

Utilisation de « remotion-markup ». Add a MapLibre map background.

Résultat attendu:

A map composition structure using a reviewed style source.
Guidance for deterministic map rendering.
Notes about network access and asset ownership.

Audit de sécurité

Risque élevé

v1 • 20/07/2026 Ouvrir le rapport versionné

Most static detections are false positives caused by Markdown fences, JavaScript template literals, relative documentation links, and public example URLs. One example fetches an unvalidated caller-provided URL, which can enable server-side request forgery in server rendering contexts. The voiceover example also constructs an output path from unvalidated identifiers.

Fichiers analysés

4,145

Lignes analysées

Éléments à examiner

Faux positifs ignorés

Préoccupations de sécurité confirmées (1)

Élevé

voiceover.md:26 voiceover.md:53

Unvalidated identifiers in generated audio path

The voiceover example writes a file path built from compositionId and scene.id without showing validation. If those values are untrusted, path segments can escape the intended public/voiceover directory and overwrite files available to the process.

The documentation explicitly states that the script reads scene config and then interpolates two identifiers into writeFileSync. Exploitability depends on whether callers control those identifiers, but no path normalization or allowlist is shown.

Éléments d’évaluation des capacités (1)

Il s’agit de capacités locales réelles qui peuvent être attendues pour cette compétence ; elles nécessitent donc un examen, mais ne sont pas comptabilisées comme comportement malveillant confirmé.

Faible

calculate-metadata.md:112

Fetch API call

const response = await fetch(props.dataUrl, { signal: abortSignal });

The example fetches the caller-controlled props.dataUrl without validation. In a server-side render workflow, an untrusted URL could reach internal network services.

Facteurs de risque

⚙️ Commandes externes (50)

🌐 Accès réseau (25)

📁 Accès au système de fichiers (9)

calculate-metadata.md:29 calculate-metadata.md:48 silence-detection.md:19 silence-detection.md:31 SKILL.md:9 SKILL.md:193 text-highlights.md:56 voiceover.md:53 voiceover.md:58

🔑 Variables d’environnement (10)

mapbox.md:59 mapbox.md:76 mapbox.md:152 mapbox.md:59 mapbox.md:76 mapbox.md:152 voiceover.md:36 voiceover.md:36 voiceover.md:14 voiceover.md:36

Audité par: claude

Partager et citer ce rapport

Partagez le rapport d’évaluation versionné, le badge neutre, la carte intégrable et les citations. Skillstore présente les preuves sans décider si ce Skill est sûr.

Ouvrir le rapport versionné

Copier le lien du rapport

https://skillstore.io/skills/remotion-dev-remotion-markup/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Badge Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/remotion-dev-remotion-markup/security.svg)](https://skillstore.io/skills/remotion-dev-remotion-markup?utm_source=security_passport_badge)

Badge HTML

<a href="https://skillstore.io/skills/remotion-dev-remotion-markup?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/remotion-dev-remotion-markup/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Carte intégrable

<iframe src="https://skillstore.io/embed/skills/remotion-dev-remotion-markup.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Citations académiques (APA · BibTeX · CFF)

Citation APA

remotion-dev. (2026). remotion-markup security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/remotion-dev-remotion-markup/audits/1

Citation BibTeX

@techreport{remotion-dev-remotion-dev-remotion-markup-2026,
  author = {remotion-dev},
  title = {remotion-markup security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/remotion-dev-remotion-markup/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "remotion-markup security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "remotion-dev"
date-released: "2026-07-20"
url: "https://skillstore.io/skills/remotion-dev-remotion-markup/audits/1"
identifiers:
  - type: other
    value: "skillstore:remotion-dev-remotion-markup:audit:1"
    description: "Skillstore immutable audit report identifier"

Score Skillstore

Pourquoi ce score Niveau de confiance des preuves: Moyen

Architecture

Maintenabilité

Contenu

Communauté

Conformité aux spécifications

Ce que vous pouvez créer

Create a product video

Build a React composition with animated text, images, audio, and scene timing.

Edit a video timeline

Trim clips, sequence scenes, and calculate duration for a multi-part composition.

Add narrated explainers

Generate scene audio with an approved TTS provider and match composition length to audio.

Essayez ces prompts

Start a composition

Create a simple Remotion composition with a title, background color, and fade-in animation.

Add media assets

Add an image sequence and background audio to my Remotion composition. Use local public assets and explain the timing.

Build a scene timeline

Help me sequence three video scenes with trims, overlaps, and a transition at 30 frames per second.

Design dynamic metadata

Design a calculateMetadata function for my Remotion composition. Validate external URLs and keep all fetched data within approved limits.

Bonnes pratiques

Use local or approved media assets when rendering production videos.
Keep timing calculations in frames and define the composition FPS clearly.
Validate external URLs and dynamic asset identifiers before server-side rendering.

Éviter

Do not place unvalidated user identifiers directly into output file paths.
Do not fetch arbitrary user-provided URLs from a rendering server.
Do not depend on remote media without considering availability, licensing, and caching.