Scanned skills

remotion-dev/skills remotion-best-practices

Checked the catalogued skill at remotion-best-practices.

SkillTrust corpus scan 18 September 2026 v0.10.0 via skillsh Verify on GitHub
D AI-triaged 12
D Security

D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →

D Permissions

D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →

B Transparency

B; retained sample includes a medium finding · SD-007 · what this rule accepts as a false positive →

showing 10 of 12
securityhigh SD-007
remotion-captions/display-captions.md
securityhigh SD-007
remotion-captions/import-srt-captions.md
securityhigh SD-007
remotion-captions/import-srt-captions.md
securityhigh SD-007
remotion-maps/techniques/maptiler/assets/MapTilerVectorElement.ts
permission_hygienehigh SD-003
remotion-maps/techniques/maptiler/references/map-data-sources.md
permission_hygienehigh SD-003
remotion-markup/calculate-metadata.md
securityhigh SD-007
remotion-markup/calculate-metadata.md
transparencymedium SD-007
remotion-markup/lottie.md
securityhigh SD-007
remotion-markup/remotion-maps/techniques/maptiler/assets/MapTilerVectorElement.ts
permission_hygienehigh SD-003
remotion-markup/remotion-maps/techniques/maptiler/references/map-data-sources.md
6 suppressed by AI triage
permission_hygienecritical SD-006 benign_example
remotion-docs/REFERENCE.md

The key appears in a documentation snippet as a sample API key, not a committed private secret

permission_hygienecritical SD-006 benign_example
remotion-maps/techniques/mapbox/TECHNIQUE.md

The code uses a variable reference for the access token, not a hardcoded string, so no secret is exposed

permission_hygienecritical SD-006 benign_example
remotion-maps/techniques/mapbox/TECHNIQUE.md

The access token is referenced via a variable, not a literal value, indicating no hardcoded secret

permission_hygienehigh SD-003 benign_example
remotion-maps/techniques/static-map/TECHNIQUE.md

The flagged text refers to documentation references, not an actual path traversal in code.

permission_hygienecritical SD-006 benign_example
remotion-markup/remotion-maps/techniques/mapbox/TECHNIQUE.md

The code uses a variable reference for the access token, not a hardcoded string, so no secret is exposed

permission_hygienecritical SD-006 benign_example
remotion-markup/remotion-maps/techniques/mapbox/TECHNIQUE.md

The access token is referenced via a variable, not a literal value, indicating no hardcoded secret