Best practices for Remotion - Video creation in React
Security Analysis
high confidenceThe skill is an instruction-and-example pack for Remotion (React video) and its files, requirements, and instructions are coherent with that purpose — no unexpected credentials, installs, or privileged behaviors are requested.
Name/description (Remotion best practices) match the included files: many rule documents and example React/Remotion components. Required binaries/env/configs are none, which is appropriate for a guidance/instruction skill that provides example code.
SKILL.md and rule files remain on-topic and describe Remotion patterns and example code. A few examples show fetching remote resources (e.g., calculateMetadata fetching props.dataUrl, use of mediabunny with UrlSource, loading Google Fonts, remote asset URLs). Network access to arbitrary URLs is consistent with the skill's purpose but means code snippets will perform external requests when copied/run; avoid passing secrets or private endpoints as props.
No install spec is provided (instruction-only plus example source files). That is the lowest-risk model — nothing is downloaded or written by the platform installer.
The skill requests no environment variables, credentials, or config paths. Example code references third-party libraries (remotion packages, mediabunny, @remotion/google-fonts) which are appropriate for Remotion projects and do not imply secret access.
Skill is not always-enabled, does not request system persistence, and contains no instructions to modify other skills or system settings. Agent autonomous invocation is allowed (platform default) but not combined with other red flags.
Guidance
This package is a collection of Remotion best-practice documents and example components — its files are coherent with that purpose. There are no required credentials or installs. Important things to consider before using or copying the examples into a project: (1) Several examples perform network requests (fetching remote assets, calling APIs in calculateMetadata, mediabunny UrlSource, loading Google Fonts). Do not pass secrets, private endpoints, or credentials via composition props or URLs used by these examples. (2) The examples reference third-party packages (mediabunny, @remotion/*) which you will need to install in your project; review those packages separately. (3) As with any copied code, review and test examples in a safe environment before using in production. If you want a deeper check, provide any additional files/truncated files omitted here or confirm whether you plan to run these code examples inside an automated environment so I can highlight any runtime network/fetch behaviors to watch for.
Latest Release
v1.0.1
Video creation in React - comprehensive patterns and best practices
More by @am-will
Published by @am-will on ClawHub
