OpenAI Codex security directory

Remotion

Published by Remotion

High risk

Helps Codex create videos programmatically with React and Remotion. Build animations, captions, audio, transitions, charts and 3D scenes. Preview compositions, render video output and develop apps around them.

Security assessment

Plutonium assessed this plugin for permissions, capabilities, and security-relevant behavior.

  • Starts and operates Remotion Studio in an in-app browser: Can programmatically control a browser, including navigation, form input, clicks, capture, or page inspection.
  • Can provision AWS identities and deploy Lambda rendering infrastructure: Can deploy code, applications, containers, workflows, or infrastructure to a persistent environment.
  • Writes project source, rendered media and generated geospatial assets: Can read, create, or change files on the local filesystem or in a selected project.
  • Can load user-selected remote media and map services: Can send prompts, files, queries, or connected-service data to an external service.
  • Creates privileged AWS credentials and stores them locally: Can create or change persistent records, files, projects, permissions, settings, or credentials.
  • Creates, upgrades, builds and renders Remotion projects with local programs: Can execute code, commands, scripts, unrestricted queries, or dynamic gateway actions.
  • Cloud rendering can consume paid AWS compute and storage: Can initiate purchases, paid jobs, payments, refunds, infrastructure spend, or other financial activity.

Available capabilities

This add-on exposes 12 tools or capabilities.

  • remotion-best-practices
  • remotion-captions
  • remotion-create
  • remotion-docs
  • remotion-interactivity
  • remotion-maps
  • remotion-markup
  • remotion-multimedia
  • remotion-render
  • remotion-saas
  • remotion-studio
  • remotion-upgrade

The interactive security report will load automatically.