Skills remotion-render
📦

remotion-render

Content revision r1 Critical ⚙️ External commands🌐 Network access

Render Remotion Videos from React Components

React teams need a repeatable way to turn component animations into video files. This skill sends Remotion TSX to inference.sh and returns MP4 renders with configurable output settings.

Supports: Claude Codex Code(CC)
⚠️ 38 Poor

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "remotion-render" from https://skillstore.io/skills/inference-sh-9-remotion-render.md and its manifest at https://skillstore.io/api/skills/inference-sh-9-remotion-render/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/inference-sh-9-remotion-render.md Signed manifest GET /api/skills/inference-sh-9-remotion-render/manifest Signed lockfile GET /api/skills/inference-sh-9-remotion-render/lockfile

Test it

Using "remotion-render". Create a three second fade-in title animation.

Expected outcome:

Returns an MP4 video link with a centered title that fades from transparent to fully visible.

Using "remotion-render". Render a square progress counter for social media.

Expected outcome:

Returns a 1080 square MP4 with animated percentage text and the requested frame rate.

Using "remotion-render". Render a branded sequence with title and subtitle props.

Expected outcome:

Returns an MP4 that applies the supplied text props inside the Remotion component.

Security Audit

Critical
v4 • 7/6/2026 Open versioned report

The skill appears to be a legitimate Remotion rendering workflow, but it depends on the inference.sh CLI and cloud renderer. The quick start includes a curl-to-shell installer, which is a confirmed critical supply-chain risk. Most Markdown backtick detections are false positives, while CLI examples and remote rendering remain real trust boundaries.

1
Files scanned
210
Lines analyzed
10
Review items
0
False positives ignored

Confirmed security concerns (2)

Critical
SKILL.md:17
Pipe to shell pattern
curl -fsSL https://cli.inference.sh | sh && infsh login
The quick start instructs users to run curl -fsSL https://cli.inference.sh piped into sh. That executes a remote script directly and is a critical supply-chain risk.
Medium
SKILL.md:20-26SKILL.md:35-37SKILL.md:136-165
External Service Receives Source Code and Props
The skill sends Remotion TSX component code and props to inference.sh for cloud rendering, which may expose proprietary code or sensitive data.
The examples show TSX code and input props being passed to infsh/remotion-render. The service is explicitly described as inference.sh-based rendering, so the data leaves the local environment.
Capability review items (10)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Critical
SKILL.md:17
Hardcoded URL
curl -fsSL https://cli.inference.sh | sh && infsh login
The URL is fetched by curl and piped directly to sh, executing a remote installer before local inspection. This is a remote code execution trust risk.
Medium
SKILL.md:15-27
Ruby/shell backtick execution
```bash
This range includes shell examples for installing the CLI and running infsh. The curl-to-shell portion is handled by the blocker finding, but the external command exposure is real.
Medium
SKILL.md:70-78
Ruby/shell backtick execution
```bash
The bash example invokes infsh app run and sends TSX input to an external rendering service. This is expected behavior, but it is still a real external command boundary.
Medium
SKILL.md:82-90
Ruby/shell backtick execution
```bash
The bash example invokes infsh app run and sends TSX input to an external rendering service. This is expected behavior, but it is still a real external command boundary.
Medium
SKILL.md:94-96
Ruby/shell backtick execution
```bash
The bash example invokes infsh app run and sends TSX input to an external rendering service. This is expected behavior, but it is still a real external command boundary.
Medium
SKILL.md:106-115
Ruby/shell backtick execution
```bash
The bash example invokes infsh app run and sends TSX input to an external rendering service. This is expected behavior, but it is still a real external command boundary.
Medium
SKILL.md:119-127
Ruby/shell backtick execution
```bash
The bash example invokes infsh app run and sends TSX input to an external rendering service. This is expected behavior, but it is still a real external command boundary.
Medium
SKILL.md:188-203
Ruby/shell backtick execution
```bash
This bash block recommends npx skills add commands for additional skills. Installing more skills expands the trusted instruction surface beyond this package.
Low
SKILL.md:9
Hardcoded URL
Render videos from React/Remotion component code via [inference.sh](https://inference.sh) CLI.
The text states rendering is performed through the inference.sh CLI, so the workflow depends on an external service. This is expected but creates a real network trust boundary.
Low
SKILL.md:11
Hardcoded URL
![Remotion Render](https://cloud.inference.sh/app/files/u/4mg21r6ta37mpaz6ktzwtt8krr/01kg2c0egyg243m
The Markdown image points to a remote cloud.inference.sh asset that may be fetched by renderers. There is no code execution, so the impact is low.

Risk Factors

⚙️ External commands (30)
SKILL.md:15-27 SKILL.md:27-29 SKILL.md:29-35 SKILL.md:35-36 SKILL.md:36-37 SKILL.md:37-38 SKILL.md:38-39 SKILL.md:39-40 SKILL.md:40-41 SKILL.md:41-42 SKILL.md:42-46 SKILL.md:46 SKILL.md:48-64 SKILL.md:64-70 SKILL.md:70-78 SKILL.md:78-82 SKILL.md:82-90 SKILL.md:90-94 SKILL.md:94-96 SKILL.md:96-102 SKILL.md:102-106 SKILL.md:106-115 SKILL.md:115-119 SKILL.md:119-127 SKILL.md:127-131 SKILL.md:131-168 SKILL.md:168-172 SKILL.md:172-184 SKILL.md:184-188 SKILL.md:188-203
🌐 Network access (7)
SKILL.md:9 SKILL.md:11 SKILL.md:17 SKILL.md:29 SKILL.md:207 SKILL.md:208 SKILL.md:209

Detected Patterns

Pipe to shell pattern
Audited by: codex View Audit History →
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/inference-sh-9-remotion-render/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/inference-sh-9-remotion-render/security.svg)](https://skillstore.io/skills/inference-sh-9-remotion-render?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/inference-sh-9-remotion-render?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/inference-sh-9-remotion-render/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/inference-sh-9-remotion-render.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA · BibTeX · CFF)

APA citation

inference-sh-9. (2026). remotion-render security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/inference-sh-9-remotion-render/audits/4

BibTeX citation

@techreport{inference-sh-9-inference-sh-9-remotion-render-2026, author = {inference-sh-9}, title = {remotion-render security audit report (audit version 4)}, institution = {Skillstore}, year = {2026}, number = {4}, url = {https://skillstore.io/skills/inference-sh-9-remotion-render/audits/4}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "remotion-render security audit report (audit version 4)" version: "unspecified" type: report authors: - name: "inference-sh-9" date-released: "2026-07-06" url: "https://skillstore.io/skills/inference-sh-9-remotion-render/audits/4" identifiers: - type: other value: "skillstore:inference-sh-9-remotion-render:audit:4" description: "Skillstore immutable audit report identifier"

Compare variants

17 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Highest Skillstore Score
remotion-dev Recommended

remotion-dev-remotion-render

Skillstore Score 77
Evidence Confidence High
Skillstore usage 6
Updated

2026-08-21

infsh-skills

infsh-skills-remotion-render

Skillstore Score 74
Evidence Confidence High
Skillstore usage 6
Updated

2026-08-21

toolshell

toolshell-remotion-render

Skillstore Score 69
Evidence Confidence High
Skillstore usage 16
Updated

2026-08-21

skillssh

skillssh-remotion-render

Skillstore Score 69
Evidence Confidence High
Skillstore usage 12
Updated

2026-08-21

inference-shell

inference-shell-remotion-render

Skillstore Score 69
Evidence Confidence High
Skillstore usage 7
Updated

2026-08-21

tul-sh

tul-sh-remotion-render

Skillstore Score 50
Evidence Confidence High
Skillstore usage 21
Updated

2026-08-21

halt-catch-fire

halt-catch-fire-remotion-render

Skillstore Score 50
Evidence Confidence High
Skillstore usage 12
Updated

2026-08-21

inference-skills

inference-skills-remotion-render

Skillstore Score 50
Evidence Confidence High
Skillstore usage 9
Updated

2026-08-21

inferen-sh

inferen-sh-remotion-render

Skillstore Score 50
Evidence Confidence High
Skillstore usage 7
Updated

2026-08-21

qu-skills

qu-skills-remotion-render

Skillstore Score 50
Evidence Confidence Medium
Skillstore usage 12
Updated

2026-08-21

inference-sh-skills

inference-sh-skills-remotion-render

Skillstore Score 50
Evidence Confidence Medium
Skillstore usage 7
Updated

2026-08-21

101-skills

101-skills-remotion-render

Skillstore Score 50
Evidence Confidence Medium
Skillstore usage 4
Updated

2026-08-21

inference-sh-8

inference-sh-8-remotion-render

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 8
Updated

2026-08-21

skills-shell

skills-shell-remotion-render

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 7
Updated

2026-08-21

inference-sh-6

inference-sh-6-remotion-render

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 7
Updated

2026-08-21

inference-sh-9 Current

inference-sh-9-remotion-render

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 6
Updated

2026-08-21

inference-sh-7

inference-sh-7-remotion-render

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 6
Updated

2026-08-21

Skillstore Score

Why this score Evidence Confidence: Medium
55
Architecture
85
Maintainability
85
Content
70
Community
83
Spec Compliance

What You Can Build

Generate Product Motion Clips

Create short branded MP4 clips from reusable React animation components.

Automate Data Videos

Render charts, counters, and status videos by passing updated props into one component.

Prototype Remotion Scenes

Test timing, frame rate, and layout choices before adding a render workflow to an app.

Try These Prompts

Render a Simple Title 
Use remotion-render to create a three second MP4 with centered title text that fades in smoothly.
Render with Output Settings 
Render my Remotion component as a square 1080 by 1080 MP4 at 60 frames per second for five seconds.
Render with Props 
Use remotion-render with props for title, subtitle, and theme colors so the component renders a branded announcement video.
Stream a Longer Render 
Render a ten second Remotion scene through the Python SDK and stream progress until the final video link is available.

Best Practices

  • Review all TSX before sending it to the external renderer.
  • Keep props free of secrets, credentials, private customer data, and unreleased source material.
  • Set duration, frame rate, and dimensions explicitly for repeatable renders.

Avoid

  • Do not pipe remote install scripts to a shell without manual verification.
  • Do not include API keys or private tokens in component code or props.
  • Do not install related skills automatically during a render workflow.

Frequently Asked Questions

What does this skill render?
It renders React and Remotion TSX component code into MP4 video files through inference.sh.
Does it run locally?
No. The documented workflow uses the inference.sh CLI or SDK and an external rendering service.
Can I pass custom data into a video?
Yes. The skill supports props that are passed into the exported Remotion component.
Which output settings are supported?
The examples show width, height, frames per second, duration, composition ID, props, and codec.
What should I avoid sending?
Avoid secrets, credentials, private customer data, and proprietary code that is not approved for external processing.
Why is the install command risky?
The quick start pipes a remote script into sh, so users cannot inspect the installer before execution.

Developer Details

License

MIT

Skillstore revision

r1

Version notice

The author did not declare a version.

Repository

https://github.com/inference-sh-9/skills/tree/main/skills/remotion-render/

Ref

a06681402992ceae98ba04d54cfd4ab004862696

Maintenance freshness

7/20/2026

Usage

4 downloads · 218 views

File structure

📄 SKILL.md