remotion-dev/skills remotion-markup
Checked the catalogued skill at remotion-markup.
D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →
A set by no findings on this axis
A set by no findings on this axis
5 suppressed by AI triage
The code snippet is a documentation example fetching a public animation asset from a known CDN, not a malicious outbound exfiltration.
The accessToken is referenced through a variable (mapboxAccessToken), not a literal string, so no hardcoded secret is present.
The accessToken is referenced through a variable (mapboxAccessToken), not a literal string, so no hardcoded secret is present.
The path traversal references bundled internal assets within the skill package, not arbitrary system directories.
The snippet is documentation of a normal outbound API call, not malicious code