runway-install-auth

Pass

Audited by Gen Agent Trust Hub on Oct 23, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the installation of official, well-known software packages from established registries.
  • Fetches the runwayml Python package from PyPI.
  • Fetches the @runwayml/sdk Node.js package from NPM.
  • [COMMAND_EXECUTION]: Uses standard package management commands (pip install, npm install) to set up the development environment.
  • [CREDENTIALS_UNSAFE]: The skill correctly advises users to store sensitive API keys in a .env file rather than hardcoding them into scripts, which is a security best practice for local development.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 23, 2026, 04:42 PM