The skill uses hidden text, executes unpinned packages, performs unauthorized network and file operations, and relies on missing external documentation, creating significant security and supply chain risks.
npx skills add https://github.com/remotion-dev/skillsCSS-based hidden text detected — content may be visually concealed from human review
opacity: 0
Unpinned npx package execution — `npx <pkg>` without a version pin pulls latest from npm at runtime (seen 2 times in this file at lines 199, 208)
npx remotion
SKILL.md links to "rules/audio-visualization.md" but the file is not part of the skill package — the workflow silently degrades or the content is sourced elsewhere at runtime
[./rules/audio-visualization.md](./rules/audio-visualization.md)
SKILL.md links to "rules/ffmpeg.md" but the file is not part of the skill package — the workflow silently degrades or the content is sourced elsewhere at runtime
[./rules/ffmpeg.md](./rules/ffmpeg.md)
SKILL.md links to "rules/sfx.md" but the file is not part of the skill package — the workflow silently degrades or the content is sourced elsewhere at runtime
[./rules/sfx.md](./rules/sfx.md)
SKILL.md links to "rules/silence-detection.md" but the file is not part of the skill package — the workflow silently degrades or the content is sourced elsewhere at runtime
[./rules/silence-detection.md](./rules/silence-detection.md)
SKILL.md links to "rules/subtitles.md" but the file is not part of the skill package — the workflow silently degrades or the content is sourced elsewhere at runtime
[./rules/subtitles.md](./rules/subtitles.md)
Skill does not specify a license field. Specifying a license helps users understand usage terms.
[](https://mondoo.com/ai-agent-security/skills/github/remotion-dev/skills/remotion-best-practices)<a href="https://mondoo.com/ai-agent-security/skills/github/remotion-dev/skills/remotion-best-practices"><img src="https://mondoo.com/ai-agent-security/api/badge/github/remotion-dev/skills/remotion-best-practices.svg" alt="Mondoo Skill Check" /></a>https://mondoo.com/ai-agent-security/api/badge/github/remotion-dev/skills/remotion-best-practices.svgSkills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet.