Security risk report for @forgecat/remotion-dev_skills_remotion v0.1.4
Source Integrity
Low
Profile is sourced from official Remotion repository (https://github.com/remotion-dev/skills) with clear attribution and version tracking (commit 277510e78245ac0fa275d7cb6520d52e0ac2e212).
Legitimate educational content documenting Remotion framework best practices; no supply-chain poisoning or typosquatted dependencies detected.
Agent Intent
Low
Content is purely instructional documentation for Remotion video framework; no hidden directives to manipulate the AI, exfiltrate data, or bypass security controls.
Code examples follow standard React/TypeScript patterns and Remotion APIs; no prompt injection, system prompt leakage, or guidance poisoning detected.
References to external packages (e.g., @remotion/media, @remotion/three, mediabunny) are legitimate, well-known libraries with no evidence of attacker-controlled substitutes or backdoored templates.
Details
Evidence
All code examples use official Remotion imports and documented APIs (e.g., 'import { Audio } from "@remotion/media"').
No instructions to read credentials, exfiltrate environment variables, or hide/deny instructions.
No directives to install remote payloads or weaken security defaults (e.g., TLS verification remains standard).
Permissions
Low
Profile declares no tools, hooks, or MCP servers; it is pure markdown documentation with code examples.
No file_write, file_delete, shell, or other high-risk operations are requested or configured.
Web fetch examples (e.g., fetch() in calculateMetadata) are scoped to specific use cases (fetching video metadata, loading captions) and are standard React patterns.
Details
Evidence
No 'tools' or 'mcp_servers' sections in profile metadata.
fetch() calls are limited to documented Remotion APIs and user-provided URLs (e.g., 'https://api.example.com/video/{props.videoId}'), not arbitrary network access.
MCP Risk
Low
No MCP servers are defined in the profile; it is a pure documentation/skill package.
No binary execution, unrestricted filesystem access, or hidden tool definitions present.
Details
Evidence
Profile metadata shows 'Dependencies: None' and no MCP server configuration.
ForgeCat