Skills remotion-render
📦

remotion-render

Content revision r1 Medium Risk ⚙️ External commands🌐 Network access

Render Remotion Videos From React Code

Teams need fast video previews from React animation code without managing a local Remotion setup. This skill sends TSX to inference.sh and returns rendered MP4 outputs.

Supports: Claude Codex Code(CC)
⚠️ 50 Poor

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "remotion-render" from https://skillstore.io/skills/inference-skills-remotion-render.md and its manifest at https://skillstore.io/api/skills/inference-skills-remotion-render/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/inference-skills-remotion-render.md Signed manifest GET /api/skills/inference-skills-remotion-render/manifest Signed lockfile GET /api/skills/inference-skills-remotion-render/lockfile

Test it

Using "remotion-render". A request for a three-second fade-in title video at 1080p.

Expected outcome:

An MP4 render link for a dark title card where the headline smoothly appears over the first second.

Using "remotion-render". A request to create a square animated counter for a social post.

Expected outcome:

A square MP4 render link with a percentage counter, label text, and timing suitable for social feeds.

Using "remotion-render". A request to stream progress for a longer explainer render.

Expected outcome:

Progress updates during rendering followed by a final video link when the job completes.

Security Audit

Medium Risk
v4 • 7/5/2026 Open versioned report

Most backtick-related static findings are markdown formatting false positives, but several bash examples intentionally run external CLI commands. The main residual risks are sending user-provided TSX and props to inference.sh, shell quoting mistakes when building CLI input, and optional commands that install related skills. No prompt injection text was found in SKILL.md.

1
Files scanned
211
Lines analyzed
9
Review items
0
False positives ignored

Confirmed security concerns (2)

Medium
SKILL.md:9SKILL.md:21-27SKILL.md:35-37
Remote Code and Data Submission
The skill asks users to provide React and Remotion TSX code, props, and render settings, then renders them through inference.sh. Sensitive source code, proprietary media URLs, or private data in props could be disclosed to that external service.
The documentation explicitly states that rendering happens via inference.sh and shows TSX code and props being submitted as input. This directly supports a privacy and data-handling risk, although it appears intentional.
Medium
SKILL.md:21-27SKILL.md:70-77SKILL.md:106-114
Shell Quoting Risk for User-Provided TSX
The CLI examples place large TSX payloads inside single-quoted shell arguments. If an agent inserts untrusted code without robust escaping or a structured input file, shell metacharacters could alter the command.
The examples consistently embed user-controlled TSX and props inside shell-quoted JSON. The file does not show an implementation, so the injection risk depends on how the agent constructs the final command.
Capability review items (9)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium
SKILL.md:17-28
Ruby/shell backtick execution
```bash
The fenced bash example invokes belt login and belt app run against an external rendering service. This is intentional CLI execution and network use, so it remains a real operational risk.
Medium
SKILL.md:70-78
Ruby/shell backtick execution
```bash
The bash example runs belt app run with user-provided TSX sent to infsh/remotion-render. This is a real external command path, even though it appears in documentation.
Medium
SKILL.md:82-90
Ruby/shell backtick execution
```bash
The bash example invokes belt app run to render an animated counter through a remote service. The command is intentional but still executes an external CLI.
Medium
SKILL.md:94-96
Ruby/shell backtick execution
```bash
The bash example invokes belt app run with TSX content and render settings. This is a real external CLI workflow, not only inert prose.
Medium
SKILL.md:106-115
Ruby/shell backtick execution
```bash
The bash example sends component code and props through belt app run. This is intentional external command execution with user-controlled render input.
Medium
SKILL.md:119-127
Ruby/shell backtick execution
```bash
The bash example invokes belt app run for a sequence animation. It demonstrates the command path the skill expects users or agents to execute.
Medium
SKILL.md:188-203
Ruby/shell backtick execution
```bash
The related-skills block uses npx skills add commands, which can fetch and install additional third-party skill content. That is optional, but it is real external command execution.
Low
SKILL.md:9
Hardcoded URL
Render videos from React/Remotion component code via [inference.sh](https://inference.sh) CLI.
The skill explicitly renders through inference.sh, so user code and render inputs depend on a third-party network service. This is expected behavior but should be disclosed.
Low
SKILL.md:15
Hardcoded URL
> Requires inference.sh CLI (`belt`). [Install instructions](https://raw.githubusercontent.com/infer
The install instructions point to a mutable raw GitHub URL for the external CLI. This is a low supply-chain and trust risk if users follow the link.

Risk Factors

⚙️ External commands (30)
SKILL.md:15 SKILL.md:17-28 SKILL.md:28-35 SKILL.md:35-36 SKILL.md:36-37 SKILL.md:37-38 SKILL.md:38-39 SKILL.md:39-40 SKILL.md:40-41 SKILL.md:41-42 SKILL.md:42-46 SKILL.md:46 SKILL.md:48-64 SKILL.md:64-70 SKILL.md:70-78 SKILL.md:78-82 SKILL.md:82-90 SKILL.md:90-94 SKILL.md:94-96 SKILL.md:96-102 SKILL.md:102-106 SKILL.md:106-115 SKILL.md:115-119 SKILL.md:119-127 SKILL.md:127-131 SKILL.md:131-168 SKILL.md:168-172 SKILL.md:172-184 SKILL.md:184-188 SKILL.md:188-203
🌐 Network access (6)
SKILL.md:9 SKILL.md:11 SKILL.md:15 SKILL.md:207 SKILL.md:208 SKILL.md:209
Audited by: codex View Audit History →
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/inference-skills-remotion-render/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/inference-skills-remotion-render/security.svg)](https://skillstore.io/skills/inference-skills-remotion-render?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/inference-skills-remotion-render?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/inference-skills-remotion-render/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/inference-skills-remotion-render.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA · BibTeX · CFF)

APA citation

inference-skills. (2026). remotion-render security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/inference-skills-remotion-render/audits/4

BibTeX citation

@techreport{inference-skills-inference-skills-remotion-render-2026, author = {inference-skills}, title = {remotion-render security audit report (audit version 4)}, institution = {Skillstore}, year = {2026}, number = {4}, url = {https://skillstore.io/skills/inference-skills-remotion-render/audits/4}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "remotion-render security audit report (audit version 4)" version: "unspecified" type: report authors: - name: "inference-skills" date-released: "2026-07-05" url: "https://skillstore.io/skills/inference-skills-remotion-render/audits/4" identifiers: - type: other value: "skillstore:inference-skills-remotion-render:audit:4" description: "Skillstore immutable audit report identifier"

Compare variants

17 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Highest Skillstore Score
remotion-dev Recommended

remotion-dev-remotion-render

Skillstore Score 77
Evidence Confidence High
Skillstore usage 6
Updated

2026-08-21

infsh-skills

infsh-skills-remotion-render

Skillstore Score 74
Evidence Confidence High
Skillstore usage 6
Updated

2026-08-21

toolshell

toolshell-remotion-render

Skillstore Score 69
Evidence Confidence High
Skillstore usage 16
Updated

2026-08-21

skillssh

skillssh-remotion-render

Skillstore Score 69
Evidence Confidence High
Skillstore usage 12
Updated

2026-08-21

inference-shell

inference-shell-remotion-render

Skillstore Score 69
Evidence Confidence High
Skillstore usage 7
Updated

2026-08-21

tul-sh

tul-sh-remotion-render

Skillstore Score 50
Evidence Confidence High
Skillstore usage 21
Updated

2026-08-21

halt-catch-fire

halt-catch-fire-remotion-render

Skillstore Score 50
Evidence Confidence High
Skillstore usage 12
Updated

2026-08-21

inference-skills Current

inference-skills-remotion-render

Skillstore Score 50
Evidence Confidence High
Skillstore usage 9
Updated

2026-08-21

inferen-sh

inferen-sh-remotion-render

Skillstore Score 50
Evidence Confidence High
Skillstore usage 7
Updated

2026-08-21

qu-skills

qu-skills-remotion-render

Skillstore Score 50
Evidence Confidence Medium
Skillstore usage 12
Updated

2026-08-21

inference-sh-skills

inference-sh-skills-remotion-render

Skillstore Score 50
Evidence Confidence Medium
Skillstore usage 7
Updated

2026-08-21

101-skills

101-skills-remotion-render

Skillstore Score 50
Evidence Confidence Medium
Skillstore usage 4
Updated

2026-08-21

inference-sh-8

inference-sh-8-remotion-render

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 8
Updated

2026-08-21

skills-shell

skills-shell-remotion-render

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 7
Updated

2026-08-21

inference-sh-6

inference-sh-6-remotion-render

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 7
Updated

2026-08-21

inference-sh-9

inference-sh-9-remotion-render

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 6
Updated

2026-08-21

inference-sh-7

inference-sh-7-remotion-render

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 6
Updated

2026-08-21

Skillstore Score

Why this score Evidence Confidence: High
55
Architecture
85
Maintainability
87
Content
68
Community
83
Spec Compliance

What You Can Build

Create Launch Videos

Render short branded announcement clips from reusable Remotion components and campaign text.

Prototype Motion Components

Turn React animation ideas into MP4 previews before adding them to a production video pipeline.

Publish Data Clips

Generate animated counters, charts, and explainers for reports or social distribution.

Try These Prompts

Render a Simple Intro 
Create a three-second Remotion video with a dark background, centered title, fade-in animation, 1920 by 1080, and 30 fps.
Animate Product Metrics 
Render a square video that counts from 0 to 100 and labels the metric as weekly active users. Use five seconds at 60 fps.
Use Props for Variants 
Generate a reusable Remotion component that accepts title, subtitle, and brand color props. Render one MP4 variant for a launch announcement.
Build a Sequenced Explainer 
Create a 10-second Remotion composition with three timed scenes, spring transitions, image placeholders, captions, and streaming progress updates.

Best Practices

  • Review TSX, props, and asset URLs before sending them to the remote renderer.
  • Test with short duration and lower resolution before rendering final video quality.
  • Use props for titles, colors, and data values to create reusable video variants.

Avoid

  • Do not paste secrets, API keys, private customer data, or proprietary source code into render inputs.
  • Do not assume arbitrary npm packages are available in the remote render environment.
  • Do not render untrusted user-provided TSX without review and explicit approval.

Frequently Asked Questions

What does this skill create?
It renders React and Remotion TSX components into MP4 video outputs through inference.sh.
Does it require an external service?
Yes. Rendering is performed through inference.sh, so inputs are sent outside the local workspace.
Which AI tools can use it?
The report lists support for Claude, Codex, and Claude Code.
Can I change video size and timing?
Yes. The skill documents width, height, fps, duration, codec, composition ID, and props options.
Can it use media assets?
The examples list Remotion media components, but asset access depends on reachable URLs and the remote environment.
Is it suitable for sensitive projects?
Use caution. Remove secrets, private data, and proprietary code before sending inputs to the external renderer.

Developer Details

License

MIT

Skillstore revision

r1

Version notice

The author did not declare a version.

Repository

https://github.com/inference-skills/skills/tree/main/tools/video/remotion-render/

Ref

a25199bc7d6b82598536822d1738eb5d5f54025b

Maintenance freshness

7/18/2026

Usage

4 downloads · 56 views

File structure

📄 SKILL.md

More from inference-skills

View all

Related Skills

View all