Trust Assessment
remotion-server received a trust score of 92/100, placing it in the Trusted category. This skill has passed all critical security checks and demonstrates strong security practices.
SkillShield's automated analysis identified 2 findings: 0 critical, 0 high, 1 medium, and 1 low severity. Key findings include Skill setup requires root privileges, Unpinned development dependencies.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 13, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings2
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| MEDIUM | Skill setup requires root privileges The `scripts/setup.sh` script uses `sudo apt-get install` to install system-wide browser dependencies. This requires root privileges, granting the script extensive control over the system during its execution. While necessary for the skill's functionality and documented in the `SKILL.md`, it represents an elevated permission level that should be acknowledged as a security consideration. Acknowledge and clearly document the necessity of root privileges for the setup script. Ensure the script only installs known, required packages and does not perform any other actions with elevated privileges. | LLM | scripts/setup.sh:30 | |
| LOW | Unpinned development dependencies The `scripts/create.sh` script installs development dependencies (`typescript`, `@types/react`, `tailwindcss`) without pinning them to exact versions using `--save-exact`. This means that future installations could pull in newer, potentially incompatible, or even vulnerable versions of these packages, introducing minor supply chain risks. Add the `--save-exact` flag to the `npm install -D` command to ensure that development dependencies are installed at specific, known versions, improving supply chain security. | LLM | scripts/create.sh:36 |
Scan History
Embed Code
[](https://skillshield.io/report/a14a35e72d245ac1)
Powered by SkillShield