40Medium
The skill enables arbitrary remote code execution by sending user-provided TSX to an external service and uses unpinned npx commands, creating significant risks for code injection and supply-chain attacks.
Skill Info
Namehalt-catch-fire/skills/remotion-render
Registrygithub
Version601a457f7ecf
PURLpkg:github/halt-catch-fire/skills@601a457f7ecf?skill=remotion-render
Stars584
Installs351,600
Source
SHA-25627c9a0c03006...
SHA-152197414dcd1...
MD591fc09424077...
TLSHe3f1a7198803...
ssdeep96:RHkmdXXzb...
Size7,990 bytes
Install
This skill has findings worth reviewing before installing.
GitHub
351,600 installs
Skills.shDocs
npx skills add https://github.com/halt-catch-fire/skillsAssessments (3)
AI Agent Traps ↗Indirect Code Execution via Remote Appmediumcommand executionAML.T0050AML.T0053AML.T0072LLM05:2025LLM06:2025
The skill facilitates the execution of arbitrary React/TSX code on a remote platform (inference.sh) via the `belt` CLI. This creates an indirect execution vector where the agent is instructed to send user-provided code to a third-party service for rendering, which could be leveraged for remote code execution or data exfiltration if the remote environment is compromised or malicious. [ensemble: confirmed by 3/3 passes; severity set to the agreed median (ADR-0067).]
80% confidence
belt app run infsh/remotion-render --input '{"code": "..."}'Unpinned npx package execution — `npx <pkg>` without a version pin pulls latest from npm at runtimemediumsupply chainAML.T0010AML.T0019AML.T0058LLM03:2025
Unpinned npx package execution — `npx <pkg>` without a version pin pulls latest from npm at runtime (seen 6 times in this file at lines 7, 192, 195, 198, 201, 204)
95% confidenceline 7
npx skills
Missing licenseinfopolicy violation
Skill does not specify a license field. Specifying a license helps users understand usage terms.
100% confidence
Badge
Markdown
[](https://mondoo.com/ai-agent-security/skills/github/halt-catch-fire/skills/remotion-render)HTML
<a href="https://mondoo.com/ai-agent-security/skills/github/halt-catch-fire/skills/remotion-render"><img src="https://mondoo.com/ai-agent-security/api/badge/github/halt-catch-fire/skills/remotion-render.svg" alt="Mondoo Skill Check" /></a>Image URL
https://mondoo.com/ai-agent-security/api/badge/github/halt-catch-fire/skills/remotion-render.svgSecure your AI agents
Skills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet.
- Continuous scanning of skills across all registries
- Policy enforcement before skills reach your agents
- Integration with your existing security workflow