runway-debug-bundle
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill implements a pattern for generating video content based on a
prompt_textparameter inSKILL.md. - Ingestion points: The
prompt_textfield used in theclient.image_to_video.createmethod call. - Boundary markers: None are specified to delimit or warn the agent about potentially malicious instructions embedded in the prompt data.
- Capability inventory: The skill utilizes the
runwaymlSDK and has broad environment access viaRead,Write,Edit,Bash, andGreptools. - Sanitization: There is no evidence of sanitization, filtering, or validation for the input prompt before it is sent to the AI model.
- [EXTERNAL_DOWNLOADS]: The skill identifies the official Runway Python SDK repository on GitHub (
github.com/runwayml/sdk-python) as a primary resource for implementation.
Audit Metadata