Skills remotion-render
📦

remotion-render

Content revision r1 Critical ⚙️ External commands🌐 Network access

Render Remotion Videos from React Code

Teams need repeatable video rendering without managing a local Remotion pipeline. This skill sends React/Remotion components to inference.sh and returns an MP4.

Supports: Claude Codex Code(CC)
⚠️ 38 Poor

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "remotion-render" from https://skillstore.io/skills/inference-sh-6-remotion-render.md and its manifest at https://skillstore.io/api/skills/inference-sh-6-remotion-render/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/inference-sh-6-remotion-render.md Signed manifest GET /api/skills/inference-sh-6-remotion-render/manifest Signed lockfile GET /api/skills/inference-sh-6-remotion-render/lockfile

Test it

Using "remotion-render". A request to render a two-second fade-in title at 1920 by 1080.

Expected outcome:

A completed MP4 render link and a short note confirming duration, resolution, and frame rate.

Using "remotion-render". A square animated progress counter with title and subtitle props.

Expected outcome:

  • A 1080 by 1080 MP4 with the counter animation.
  • A summary of the props used for the render.
  • A note that the render was submitted through inference.sh.

Using "remotion-render". A request to monitor a longer render from the Python SDK.

Expected outcome:

Progress updates during rendering, followed by the final MP4 location when inference.sh returns output.

Security Audit

Critical
v4 • 7/5/2026 Open versioned report

Most static backtick findings are Markdown formatting or documentation examples, but the installer command at SKILL.md:17 is a confirmed critical pipe-to-shell risk. Several infsh and npx examples are real external command guidance, and the skill intentionally sends TSX code and props to inference.sh. No prompt injection attempt was found in the reviewed file.

1
Files scanned
210
Lines analyzed
8
Review items
0
False positives ignored

Confirmed security concerns (2)

Critical
SKILL.md:17
Pipe to shell pattern
curl -fsSL https://cli.inference.sh | sh && infsh login
The command curls a remote installer and pipes it directly to sh. This executes unaudited network content immediately and is a classic supply-chain risk.
Medium
SKILL.md:20-26SKILL.md:35-37SKILL.md:136-165
Third-Party Code and Prop Upload
The skill sends React/Remotion component code and optional props to the inference.sh rendering service. Users could expose private source, media URLs, or sensitive data if they include it in render inputs.
SKILL.md shows infsh and Python SDK examples submitting code and props to inference.sh. This is the core feature, so it is a privacy boundary rather than covert exfiltration.
Capability review items (8)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

High
SKILL.md:15-27
Ruby/shell backtick execution
```bash
This fenced bash block instructs users to run a curl-to-shell installer and then use the infsh CLI. The command guidance is real execution guidance, not only Markdown formatting.
Medium
SKILL.md:70-78
Ruby/shell backtick execution
```bash
This bash example invokes infsh app run and sends component code to inference.sh. It is intended behavior, but it is real external command execution with third-party transfer.
Medium
SKILL.md:82-90
Ruby/shell backtick execution
```bash
This bash example runs the infsh CLI with embedded TSX input. Legitimate use is clear, but the command still executes a third-party rendering workflow.
Medium
SKILL.md:94-96
Ruby/shell backtick execution
```bash
This block starts an infsh app run command that submits rendering code to the hosted service. The use is documented, but external execution and upload are real.
Medium
SKILL.md:106-115
Ruby/shell backtick execution
```bash
This example runs infsh app run with user props and component code. That is expected for the skill, but it creates a third-party data submission path.
Medium
SKILL.md:119-127
Ruby/shell backtick execution
```bash
This bash example submits a multi-scene Remotion component through infsh. The command is legitimate, but it still executes an external CLI workflow.
Medium
SKILL.md:188-203
Ruby/shell backtick execution
```bash
The related-skills block contains npx skills add commands that install additional skills. That is a real supply-chain action outside the declared infsh-only tool scope.
Low
SKILL.md:17
Hardcoded URL
curl -fsSL https://cli.inference.sh | sh && infsh login
The URL is used to fetch an installer from cli.inference.sh in a shell command. It is not exfiltration by itself, but it introduces a real network trust dependency.

Risk Factors

⚙️ External commands (30)
SKILL.md:15-27 SKILL.md:27-29 SKILL.md:29-35 SKILL.md:35-36 SKILL.md:36-37 SKILL.md:37-38 SKILL.md:38-39 SKILL.md:39-40 SKILL.md:40-41 SKILL.md:41-42 SKILL.md:42-46 SKILL.md:46 SKILL.md:48-64 SKILL.md:64-70 SKILL.md:70-78 SKILL.md:78-82 SKILL.md:82-90 SKILL.md:90-94 SKILL.md:94-96 SKILL.md:96-102 SKILL.md:102-106 SKILL.md:106-115 SKILL.md:115-119 SKILL.md:119-127 SKILL.md:127-131 SKILL.md:131-168 SKILL.md:168-172 SKILL.md:172-184 SKILL.md:184-188 SKILL.md:188-203
🌐 Network access (7)
SKILL.md:9 SKILL.md:11 SKILL.md:17 SKILL.md:29 SKILL.md:207 SKILL.md:208 SKILL.md:209

Detected Patterns

Pipe to shell pattern
Audited by: codex View Audit History →
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/inference-sh-6-remotion-render/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/inference-sh-6-remotion-render/security.svg)](https://skillstore.io/skills/inference-sh-6-remotion-render?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/inference-sh-6-remotion-render?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/inference-sh-6-remotion-render/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/inference-sh-6-remotion-render.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA · BibTeX · CFF)

APA citation

inference-sh-6. (2026). remotion-render security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/inference-sh-6-remotion-render/audits/4

BibTeX citation

@techreport{inference-sh-6-inference-sh-6-remotion-render-2026, author = {inference-sh-6}, title = {remotion-render security audit report (audit version 4)}, institution = {Skillstore}, year = {2026}, number = {4}, url = {https://skillstore.io/skills/inference-sh-6-remotion-render/audits/4}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "remotion-render security audit report (audit version 4)" version: "unspecified" type: report authors: - name: "inference-sh-6" date-released: "2026-07-05" url: "https://skillstore.io/skills/inference-sh-6-remotion-render/audits/4" identifiers: - type: other value: "skillstore:inference-sh-6-remotion-render:audit:4" description: "Skillstore immutable audit report identifier"

Compare variants

17 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Highest Skillstore Score
remotion-dev Recommended

remotion-dev-remotion-render

Skillstore Score 77
Evidence Confidence High
Skillstore usage 8
Updated

2026-09-09

infsh-skills

infsh-skills-remotion-render

Skillstore Score 74
Evidence Confidence High
Skillstore usage 6
Updated

2026-09-09

toolshell

toolshell-remotion-render

Skillstore Score 69
Evidence Confidence High
Skillstore usage 16
Updated

2026-09-09

skillssh

skillssh-remotion-render

Skillstore Score 69
Evidence Confidence High
Skillstore usage 12
Updated

2026-09-09

inference-shell

inference-shell-remotion-render

Skillstore Score 69
Evidence Confidence High
Skillstore usage 7
Updated

2026-09-09

tul-sh

tul-sh-remotion-render

Skillstore Score 50
Evidence Confidence High
Skillstore usage 21
Updated

2026-09-09

halt-catch-fire

halt-catch-fire-remotion-render

Skillstore Score 50
Evidence Confidence High
Skillstore usage 12
Updated

2026-09-09

inference-skills

inference-skills-remotion-render

Skillstore Score 50
Evidence Confidence High
Skillstore usage 9
Updated

2026-09-09

inferen-sh

inferen-sh-remotion-render

Skillstore Score 50
Evidence Confidence High
Skillstore usage 8
Updated

2026-09-09

qu-skills

qu-skills-remotion-render

Skillstore Score 50
Evidence Confidence Medium
Skillstore usage 12
Updated

2026-09-09

inference-sh-skills

inference-sh-skills-remotion-render

Skillstore Score 50
Evidence Confidence Medium
Skillstore usage 8
Updated

2026-09-09

101-skills

101-skills-remotion-render

Skillstore Score 50
Evidence Confidence Medium
Skillstore usage 5
Updated

2026-09-09

inference-sh-8

inference-sh-8-remotion-render

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 9
Updated

2026-09-09

inference-sh-6 Current

inference-sh-6-remotion-render

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 8
Updated

2026-09-09

skills-shell

skills-shell-remotion-render

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 7
Updated

2026-09-09

inference-sh-9

inference-sh-9-remotion-render

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 6
Updated

2026-09-09

inference-sh-7

inference-sh-7-remotion-render

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 6
Updated

2026-09-09

Skillstore Score

Why this score Evidence Confidence: Medium
55
Architecture
85
Maintainability
87
Content
70
Community
83
Spec Compliance

What You Can Build

Create Branded Motion Graphics

Render repeatable title cards, product clips, and social videos from reusable React components.

Automate Video Generation

Turn application data and props into consistent MP4 videos without maintaining a local render farm.

Render Data-Driven Updates

Produce animated counters, charts, and status clips from structured inputs and controlled timing.

Try These Prompts

Render a Simple Intro 
Use remotion-render to create a three-second intro video with my title, dark background, and smooth fade-in.
Animate a Counter 
Create a square Remotion counter video from 0 to 100 percent, then render it at 1080 by 1080 and 60 fps.
Build Timed Scenes 
Render a product update video with three timed scenes, staggered text, spring motion, and a final call-to-action.
Stream Render Progress 
Use the Python SDK workflow to submit a longer Remotion render and report progress until the MP4 is available.

Best Practices

  • Review TSX code and props before sending them to inference.sh.
  • Use explicit width, height, fps, and duration for predictable output.
  • Keep media URLs stable and accessible for the full render duration.

Avoid

  • Do not include secrets, private source, or credentials in render props.
  • Do not run installer commands without reviewing the download and checksum process.
  • Do not rely on unsupported imports or browser-only APIs inside the component.

Frequently Asked Questions

What does this skill render?
It renders React/Remotion TSX components into MP4 videos through inference.sh.
Does it require an inference.sh account?
Yes. The examples use the inference.sh CLI or SDK and require authentication.
Can I pass custom props?
Yes. The input schema includes a props object that is passed to the exported component.
Can it render local files automatically?
No. Assets must be available to the render environment, usually through accessible URLs or supported inputs.
Is my code sent to a third party?
Yes. The component code and props are submitted to inference.sh for rendering.
What security review is needed before use?
Review installer commands, avoid sensitive inputs, and confirm that external rendering is acceptable for your project.

Developer Details

License

MIT

Skillstore revision

r1

Version notice

The author did not declare a version.

Repository

https://github.com/inference-sh-6/skills/tree/main/skills/remotion-render/

Ref

a25199bc7d6b82598536822d1738eb5d5f54025b

Maintenance freshness

7/18/2026

Usage

5 downloads · 214 views

File structure

📄 SKILL.md