Savant verdict: Analyzed
Scanned or evaluated by Savant; not yet both passing.
Live evaluation
Not evaluated yet. Workspaces can request a live evaluation.
Safety (NVIDIA SkillSpector)
Risk score
14/100
Recommendation
SAFE
Severity
LOW
Savant decision
Passed
SkillSpector rated the package safe. SkillSpector 2.12.0, static analysis.
2 patterns found
- MCP Rug Pull: npx remotionmedium · SKILL.md:10 · npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
- Prompt Injection: U+0020 x87medium · SKILL.md:20 · Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
Structure
- Description is very shortA description that says when to use the skill helps agents route to it.
- No license declaredConfirm you may reuse this skill before importing it into your repository.
SKILL.md
--- name: remotion-studio description: Preview a Remotion video version: 4.0.506 --- Execute the following command: ```bash npx remotion studio --no-open ``` If the Studio is already opened, the URL will be printed and the command will exit. Otherwise, a long-running process will start, and the URL will be printed. Open the URL in the browser. ## Useful flags | Argument | Purpose | | ----------------- | --------------------------------------------------------------------------------------------- | | `--log=<level>` | Set `error`, `warn`, `info` (default), or `verbose` logging. | | `--port=<number>` | Request a Studio server port; otherwise Remotion finds a free port. | | `--force-new` | Start another Studio instance even when one is already running for the same project and port. |