The skill uses unpinned dependencies, hides content via CSS, performs unauthorized network and system operations, and relies on missing external documentation, creating significant security and supply chain risks.
npx skills add https://github.com/remotion-dev/skillsCSS-based hidden text detected — content may be visually concealed from human review
opacity: 0
Unpinned npx package execution — `npx <pkg>` without a version pin pulls latest from npm at runtime (seen 2 times in this file at lines 223, 232)
npx remotion
SKILL.md links to "rules/audio-visualization.md" but the file is not part of the skill package — the workflow silently degrades or the content is sourced elsewhere at runtime
[./rules/audio-visualization.md](./rules/audio-visualization.md)
SKILL.md links to "rules/ffmpeg.md" but the file is not part of the skill package — the workflow silently degrades or the content is sourced elsewhere at runtime
[./rules/ffmpeg.md](./rules/ffmpeg.md)
SKILL.md links to "rules/silence-detection.md" but the file is not part of the skill package — the workflow silently degrades or the content is sourced elsewhere at runtime
[./rules/silence-detection.md](./rules/silence-detection.md)
SKILL.md links to "rules/subtitles.md" but the file is not part of the skill package — the workflow silently degrades or the content is sourced elsewhere at runtime
[./rules/subtitles.md](./rules/subtitles.md)
SKILL.md links to "rules/video-layout.md" but the file is not part of the skill package — the workflow silently degrades or the content is sourced elsewhere at runtime
[rules/video-layout.md](rules/video-layout.md)
Skill does not specify a license field. Specifying a license helps users understand usage terms.
[](https://mondoo.com/ai-agent-security/skills/github/remotion-dev/skills/remotion-best-practices)<a href="https://mondoo.com/ai-agent-security/skills/github/remotion-dev/skills/remotion-best-practices"><img src="https://mondoo.com/ai-agent-security/api/badge/github/remotion-dev/skills/remotion-best-practices.svg" alt="Mondoo Skill Check" /></a>https://mondoo.com/ai-agent-security/api/badge/github/remotion-dev/skills/remotion-best-practices.svgSkills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet.